2 matches found
sqlite vulnerable to code execution due to Object coercion
Impact Due to the underlying implementation of .ToString, it's possible to execute arbitrary JavaScript, or to achieve a denial-of-service, if a binding parameter is a crafted Object. Users of sqlite3 v5.0.0 - v5.1.4 are affected by this. Patches Fixed in v5.1.5. All users are recommended to...
9.8CVSS9.2AI score0.02356EPSS
SaveExploits1References5Affected Software1
GHSA-JQV5-7XPX-QJ74 sqlite vulnerable to code execution due to Object coercion
Impact Due to the underlying implementation of .ToString, it's possible to execute arbitrary JavaScript, or to achieve a denial-of-service, if a binding parameter is a crafted Object. Users of sqlite3 v5.0.0 - v5.1.4 are affected by this. Patches Fixed in v5.1.5. All users are recommended to...
8.1CVSS7.3AI score0.02356EPSS
SaveExploits1References5
20