Lucene search
+L

63 matches found

PyPA
PyPA
•added 2026/07/13 3:02 p.m.•21 views

PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries

SummaryThe tableprefix configuration value is directly used to construct SQL table identifiers without validation.If an attacker controls this value, they can manipulate SQL query structure, leading to unauthorized data access e.g., reading internal SQLite tables such as sqlitemaster and tamperin...

9.8CVSS6.2AI score0.00404EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder