VULNERABILITY INTELLIGENCE
CVE-2020-17495
CVSS score7.5 HIGH
EPSS probability0.87%
CISA KEVNot currently listed
Published2020-08-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database.
Weakness classification
- nvd@nist.gov: CWE-312
Primary references
- cve@mitre.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory