Lucene search
+L

1 matches found

OSV
OSV
added 2020/02/19 4:43 p.m.23 views

GHSA-MXHP-79QH-MCX6 TaffyDB can allow access to any data items in the DB

TaffyDB allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. Taffy sets an internal index for each data item in its DB. However, it is found that the internal index can be forged by adding additional properti...

7.5CVSS7AI score0.01861EPSS
SaveExploits1References4
Rows per page
Query Builder