Lucene search
+L

12 matches found

OSV
OSV
•added 2021/09/09 5:10 p.m.•91 views

GHSA-2J58-PWWV-X666 Cross-Site Request Forgery in sqlite-web

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

7.6CVSS8.9AI score0.00477EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2021/09/09 5:10 p.m.•59 views

Cross-Site Request Forgery in sqlite-web

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS4.9AI score0.00477EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
•added 2021/09/09 1:04 a.m.•16 views

Cross-Site Request Forgery (CSRF)

sqliteweb is vulnerable to cross-site request forgery. The vulnerability exists due to the lack of sanitization of input via the SQL dashboard area via the main function...

8.8CVSS8.8AI score0.00477EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2021/09/08 11:15 a.m.•18 views

CVE-2021-23404

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS7.3AI score0.00477EPSS
SaveExploits1References2
NVD
NVD
•added 2021/09/08 11:15 a.m.•41 views

CVE-2021-23404

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS0.00477EPSS
SaveExploits1References2
Prion
Prion
•added 2021/09/08 11:15 a.m.•27 views

Cross site request forgery (csrf)

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

6.8CVSS8.9AI score0.00477EPSS
SaveExploits1References2
OSV
OSV
•added 2021/09/08 11:15 a.m.•48 views

PYSEC-2021-332

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS4.7AI score0.00477EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/09/08 10:50 a.m.•52 views

CVE-2021-23404 Cross-site Request Forgery (CSRF)

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

7.6CVSS9.2AI score0.00477EPSS
SaveExploits1References2
Mend
Mend
•added 2021/09/08 10:50 a.m.•0 views

CVE-2021-23404

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS0.00477EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2021/09/08 12:00 a.m.•2 views

PT-2021-15495

Name of the Vulnerable Software and Affected Versions sqlite-web versions all versions Description The issue concerns a lack of validation for requests in the SQL dashboard area, allowing sensitive actions to be performed without proper verification of the request's origin. This could enable an...

8.8CVSS0.00477EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/08 12:00 a.m.•3 views

CVE-2021-23404: Cross-Site Request Forgery (CSRF)

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS5.8AI score0.00477EPSS
SaveExploits1References2
Snyk
Snyk
•added 2021/07/09 12:12 p.m.•8 views

Cross-site Request Forgery (CSRF)

Overview sqlite-web is a Web-based SQLite database browser. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable a...

8.8CVSS7.1AI score0.00477EPSS
SaveExploits1References2
Rows per page
Query Builder