CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2020-17495
High (7.5) in django-celery-results project django-celery-results. EPSS 0.9% chance of exploitation in the next 30 days. Fixed in django-celery-results 2.0.0, 2.4.0.
django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
- CWE
- CWE-312
- Published
- Modified
- Record from
- the NVD, synced
Affected
- django-celery-results_project:django-celery-results
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-fvx8-v524-8579 | PyPI | django-celery-results | <2.4.0 | 2.4.0 |
| PYSEC-2020-38 | PyPI | django-celery-results | <2.0.0 | 2.0.0 |