CVE-2020-7471 - log back

CVE-2020-7471 created at 03 Feb 2020 19:39:11
Severity
+ Medium
Remote
+ Remote
Type
+ Sql injection
Description
+ django.contrib.postgres.aggregates.StringAgg aggregation function was subject to SQL injection, using a suitably crafted delimiter.
References
+ https://www.djangoproject.com/weblog/2020/feb/03/security-releases/
Notes