2 matches found
GHSA-JQV5-7XPX-QJ74 sqlite vulnerable to code execution due to Object coercion
Impact Due to the underlying implementation of .ToString, it's possible to execute arbitrary JavaScript, or to achieve a denial-of-service, if a binding parameter is a crafted Object. Users of sqlite3 v5.0.0 - v5.1.4 are affected by this. Patches Fixed in v5.1.5. All users are recommended to...
8.1CVSS7.3AI score0.02356EPSS
SaveExploits1References5
sqlite vulnerable to code execution due to Object coercion
Impact Due to the underlying implementation of .ToString, it's possible to execute arbitrary JavaScript, or to achieve a denial-of-service, if a binding parameter is a crafted Object. Users of sqlite3 v5.0.0 - v5.1.4 are affected by this. Patches Fixed in v5.1.5. All users are recommended to...
9.8CVSS9.2AI score0.02356EPSS
SaveExploits1References5Affected Software1
20