Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/01/21 9:7 p.m.19 views

sniff_csv provides filesystem access even when enable_external_access is disabled in duckdb

Summary Content in filesystem is accessible for reading using sniffcsv, even with enableexternalaccess=false. Details During a pentest, a security researcher was able to access environment variable data and other system data by using the sniffcsv function, even though we set enableexternalaccess ...

7.5CVSS6.2AI score0.00813EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder