24 matches found
CVE-2023-32697 Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled
SQLite JDBC is a library for accessing and creating SQLite database files in Java. Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. This issue impacting versions 3.6.14.1 through 3.41.2.1 and has been fixed in version 3.41.2.2...
CVE-2021-32697
creationtimestamp| type| source ---|---|--- 2021-06-21 22:15:23+00:00| published-proof-of-concept| https://t.me/cibsecurity/25582...
CVE-2021-32697
The CVE-2021-32697 issue affects the Neos Form framework (neos/forms) where a crafted GET request with a valid form state can submit a form without triggering validators. The form state is protected by an HMAC that is still verified, so exploitation requires that Form Finishers may run actions ev...