CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database.

• CWE-312

• https://github.com/celery/django-celery-results/issues/142Third Party Advisory
• https://github.com/celery/django-celery-results/issues/142Third Party Advisory

Published

Aug 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17485A Remote Code Execution vulnerability exist in Uffizio's GPS…9.8
• CVE-2020-17487radare2 4.5.0 misparses signature information in PE files, c…7.5
• CVE-2020-17489An issue was discovered in certain configurations of GNOME g…4.3
• CVE-2020-1749A flaw was found in the Linux kernel's implementation of som…7.5
• CVE-2020-17490The TLS module within SaltStack Salt through 3002 creates ce…5.5
• CVE-2020-17494Untangle Firewall NG before 16.0 uses MD5 for passwords.5.3
• CVE-2020-17496vBulletin 5.5.4 through 5.6.2 allows remote command executio…9.8
• CVE-2020-17497eapol.c in iNet wireless daemon (IWD) through 1.8 allows att…8.1
• CVE-2020-17498In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector co…6.5
• CVE-2020-1750A flaw was found in the machine-config-operator that causes …6.5
• CVE-2020-17500Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and…9.8
• CVE-2020-17502Barco TransForm N before 3.8 allows Command Injection (issue…7.2