Lucene search
K

9 matches found

Github Security Blog
Github Security Blog
added 2021/09/09 5:10 p.m.42 views

Cross-Site Request Forgery in sqlite-web

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS4.9AI score0.00141EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2021/09/09 5:10 p.m.14 views

GHSA-2J58-PWWV-X666 Cross-Site Request Forgery in sqlite-web

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

7.6CVSS8.9AI score0.00141EPSS
Exploits1References6
Veracode
Veracode
added 2021/09/09 1:4 a.m.9 views

Cross-Site Request Forgery (CSRF)

sqliteweb is vulnerable to cross-site request forgery. The vulnerability exists due to the lack of sanitization of input via the SQL dashboard area via the main function...

8.8CVSS8.8AI score0.00141EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2021/09/08 11:15 a.m.7 views

CVE-2021-23404

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS0.00141EPSS
Exploits1References2
OSV
OSV
added 2021/09/08 11:15 a.m.1 views

CVE-2021-23404

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS7.3AI score0.00141EPSS
Exploits1References2
Prion
Prion
added 2021/09/08 11:15 a.m.11 views

Cross site request forgery (csrf)

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

6.8CVSS8.9AI score0.00141EPSS
Exploits1References2
OSV
OSV
added 2021/09/08 11:15 a.m.16 views

PYSEC-2021-332

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS4.7AI score0.00141EPSS
Exploits1References3
Cvelist
Cvelist
added 2021/09/08 10:50 a.m.15 views

CVE-2021-23404 Cross-site Request Forgery (CSRF)

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

7.6CVSS9.2AI score0.00141EPSS
Exploits1References2
Snyk
Snyk
added 2021/07/09 12:12 p.m.1 views

Cross-site Request Forgery (CSRF)

Overview sqlite-web is a Web-based SQLite database browser. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable a...

8.8CVSS7.1AI score0.00141EPSS
Exploits1References2
Rows per page
Query Builder