This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-17495 →

DEBIAN-CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variabl...

Original description

The description as published by the source.

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 python-django-celery-results

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 python-django-celery-results

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 python-django-celery-results

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org