OrientDB Access Control Command Execution

The vulnerability of the OrientDB database management system is related to deficiencies in restricting access to certain functions such as “where”, “fetchplan”, and “order by”. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands using a specially...

OrientDB Arbitrary Command Execution Vulnerability

OrientDB is a British company Orient a set of open source NoSQL database management system . The system supports ACID transactions , fast indexes and SQL queries and other features . OrientDB 2.22 and previous versions of a security vulnerability , the vulnerability stems from the program fails t...