Vulners
Lucene search
2 matches found
CVE-2023-31847
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side...
6.5CVSS6.9AI score0.00629EPSS
Exploits1References1
Code injection
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side...
4CVSS6.4AI score0.00629EPSS
Exploits1References1Affected Software1
20