Lucene search
+L

1 matches found

Veracode
Veracode
added 2024/07/25 6:15 a.m.19 views

Unauthorized File Access

duckdb is vulnerable to Unauthorized File Access. The vulnerability is due to inadequate restrictions in the sniffcsv function, allowing access to the filesystem even when enableexternalaccess=false. Attackers can exploit this by reading content from files such as /etc/hosts and proc/self/environ...

7.5CVSS6.7AI score0.00813EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder