Lucene search

Davinci Security Vulnerabilities - 2023

cve

CVE-2023-24206

Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function.

9.8CVSS

9.8AI Score

0.002EPSS

2023-02-27 01:15 PM

cve

CVE-2023-31847

In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side.

6.5CVSS

6.4AI Score

0.001EPSS

2023-05-17 01:15 AM

cve

CVE-2023-31848

davinci 0.3.0-rc is vulnerable to Server-side request forgery (SSRF).

8.8CVSS

8.7AI Score

0.001EPSS

2023-05-17 12:15 AM