Lucene search
+L

1 matches found

OSV
OSV
added 2023/08/22 6:6 p.m.86 views

GHSA-7CH3-7PP7-7CPQ Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users

Impact This bug affects Datasette instances running a Datasette 1.0 alpha - 1.0a0, 1.0a1, 1.0a2 or 1.0a3 - in an online accessible location but with authentication enabled using a plugin such as datasette-auth-passwords. The /-/api API explorer endpoint could reveal the names of both databases an...

5.3CVSS5.2AI score0.00464EPSS
SaveExploits0References5
Rows per page
Query Builder