CVE-2020-26207

2020-11-0422:15:12

Google

osv.dev

databaseschemaviewer

arbitrary code execution

.dbschema file

patch

untrusted sources

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

61.1%

JSON

DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted .dbschema file. The patch was released in v2.7.4.3. As a workaround, ensure .dbschema files from untrusted sources are not opened.