1 matches found
Code Injection
MindsDB is vulnerable to Code Injection. The vulnerability is due to the unsafe use of the eval function, which directly executes input Python code without proper validation. It allows an attackers to inject and execute arbitrary code via the 'SELECT WHERE' clause...
8.8CVSS7.7AI score0.02148EPSS
SaveExploits1References4Affected Software1
20