search

farcepest / MySQLdb1

MySQL database connector for Python (legacy version)
https://sourceforge.net/projects/mysql-python/
666 stars 318 forks source link

Vulnerable to CVE-2015-3152 when using TLS with mysql 5.5/5.6 client libs #116

Closed edmorley closed 9 months ago

edmorley commented 8 years ago

Cross-posting in case there are people watching this repository, but not PyMySQL/mysqlclient-python.

If MySQLdb is used with mysql client libraries < v5.7, then TLS connections are vulnerable to MITM due to CVE-2015-3152.

See PyMySQL/mysqlclient-python#98 for more details.