Lucene search
GoogleOSV:GHSA-XM6R-4466-MR74HistoryOct 18, 2018 - 5:40 p.m.
OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection
2018-10-1817:40:56
Google
osv.dev
10
0.328 Low
EPSS
Percentile
97.1%
OrientDB through 2.2.22 does not enforce privilege requirements during “where” or “fetchplan” or “order by” use, which allows remote attackers to execute arbitrary OS commands via a crafted request.
Related
exploitpack
exploitpack
OrientDB - Code Execution
2017-07-13 00:00:00
prion
prion
Design/Logic Flaw
2017-07-20 00:29:00
cvelist
cvelist
CVE-2017-11467
2017-07-20 00:00:00
checkpoint_advisories
checkpoint_advisories
OrientDB Groovy Wrapper Remote Code Execution (CVE-2017-11467)
2018-02-04 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2017-07-20 17:29:16
nvd
nvd
CVE-2017-11467
2017-07-20 00:29:00
cve
cve
CVE-2017-11467
2017-07-20 00:29:00
github
github
openvas
openvas
OrientDB Server 2.2.x <= 2.2.22 RCE Vulnerability
2017-10-12 00:00:00
exploitdb
exploitdb
OrientDB - Code Execution
2017-07-13 00:00:00