1 matches found
ClickMigrate has Path Traversal in "revision -m" argument
Impact A path traversal vulnerability in the revision command allowed a crafted migration name supplied via the -m argument to escape the intended migrations directory. Under specific conditions, an attacker could cause the tool to create a .sql file in an arbitrary location writable by the user...
6AI score
SaveExploits0References3Affected Software1
20