Lucene search
+L

3 matches found

OSV
OSV
added 2025/02/06 7:58 p.m.15 views

GHSA-9R4C-JWX3-3J76 WhoDB has a path traversal opening Sqlite3 database

Summary While the application only displays Sqlite3 databases present in the directory /db, there is no path traversal prevention in place. This allows an unauthenticated attacker to open any Sqlite3 database present on the host machine that the application is running on. Details WhoDB allows use...

10CVSS9.3AI score0.02728EPSS
SaveExploits1References6
Rows per page
Query Builder