Davinci Security Vulnerabilities

CVE-2023-31847

In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client...

CVE-2023-31848

davinci 0.3.0-rc is vulnerable to Server-side request forgery...

CVE-2023-24206

Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay...