Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2020/06/03 4:50 p.m.23 views

CVE-2020-4035 DoS or local data modification via malicious record IDs in WatermelonDB

In WatermelonDB NPM package "@nozbe/watermelondb" before versions 0.15.1 and 0.16.2, a maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the database, generally causing the app to become...

5.9CVSS5.8AI score0.00763EPSS
SaveExploits0References2
Rows per page
Query Builder