Vulnerability Details CVE-2020-11010
In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, starts_with, or ends_with filters (and their case-insensitive counterparts).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.7%
CVSS Severity
CVSS v3 Score 6.3
CVSS v2 Score 6.5
Products affected by CVE-2020-11010
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.0
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.1
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.10
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.11
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.12
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.13
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.2
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.3
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.4
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.5
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.6
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.7
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.8
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.11.9
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.12.0
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.12.1
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.12.2
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.12.3
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.12.4
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.12.5
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.12.6
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.12.7
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.12.8
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.0
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.1
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.10
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.11
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.12
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.2
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.3
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.4
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.5
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.6
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.7
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.8
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.13.9
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.14.0
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.14.1
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.14.2
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.0
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.1
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.10
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.11
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.12
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.13
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.14
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.15
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.16
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.17
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.18
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.19
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.2
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.20
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.21
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.22
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.3
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.4
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.5
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.6
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.7
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.8
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.15.9
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.16.0
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.16.1
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.16.2
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.16.3
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.16.4
-
cpe:2.3:a:tortoise_orm_project:tortoise_orm:0.16.5