Lucene search
+L

10 matches found

Github Security Blog
Github Security Blog
•added 2021/09/09 5:10 p.m.•54 views

Cross-Site Request Forgery in sqlite-web

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS4.9AI score0.00477EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2021/09/09 5:10 p.m.•89 views

GHSA-2J58-PWWV-X666 Cross-Site Request Forgery in sqlite-web

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

7.6CVSS8.9AI score0.00477EPSS
SaveExploits1References6
Veracode
Veracode
•added 2021/09/09 1:04 a.m.•16 views

Cross-Site Request Forgery (CSRF)

sqliteweb is vulnerable to cross-site request forgery. The vulnerability exists due to the lack of sanitization of input via the SQL dashboard area via the main function...

8.8CVSS8.8AI score0.00477EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2021/09/08 11:15 a.m.•17 views

CVE-2021-23404

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS7.3AI score0.00477EPSS
SaveExploits1References2
NVD
NVD
•added 2021/09/08 11:15 a.m.•39 views

CVE-2021-23404

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS0.00477EPSS
SaveExploits1References2
Prion
Prion
•added 2021/09/08 11:15 a.m.•26 views

Cross site request forgery (csrf)

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

6.8CVSS8.9AI score0.00477EPSS
SaveExploits1References2
OSV
OSV
•added 2021/09/08 11:15 a.m.•46 views

PYSEC-2021-332

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS4.7AI score0.00477EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/09/08 10:50 a.m.•50 views

CVE-2021-23404 Cross-site Request Forgery (CSRF)

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

7.6CVSS9.2AI score0.00477EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/08 12:00 a.m.•3 views

CVE-2021-23404: Cross-Site Request Forgery (CSRF)

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS5.8AI score0.00477EPSS
SaveExploits1References2
Snyk
Snyk
•added 2021/07/09 12:12 p.m.•8 views

Cross-site Request Forgery (CSRF)

Overview sqlite-web is a Web-based SQLite database browser. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable a...

8.8CVSS7.1AI score0.00477EPSS
SaveExploits1References2
Rows per page
Query Builder