In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side...
6.5CVSS6.9AI score0.00629EPSS
SaveExploits1References1
Prion•added 2023/05/17 1:15 a.m.•16 views
Code injection
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side...