Lucene search
+L

2 matches found

OSV
OSV
added 2020/06/03 9:57 p.m.19 views

GHSA-38F9-M297-6Q9G DoS via malicious record IDs in WatermelonDB

Impact Medium severity 5.9 https://www.first.org/cvss/calculator/3.0CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H A maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the database, generally...

5.9CVSS5.8AI score0.00763EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2020/06/03 9:57 p.m.65 views

DoS via malicious record IDs in WatermelonDB

Impact Medium severity 5.9 https://www.first.org/cvss/calculator/3.0CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H A maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the database, generally...

5.9CVSS5.8AI score0.00763EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder