Arbitrary Code Execution

🗓️ 15 Mar 2023 17:14:42Reported by Veracode Vulnerability DatabaseType

SQLite3 Arbitrary Code Execution vulnerability in .ToString() implementation

Reporter	Title	Published	Views	Family All 28
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in moment-timezone affects IBM VM Recovery Manager DR GUI	19 Sep 202309:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	24 Jul 202417:15	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 May 202318:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in moment-timezone affects IBM VM Recovery Manager DR GUI	20 Sep 202310:22	–	ibm
CNNVD	node-sqlite3 安全漏洞	15 Mar 202300:00	–	cnnvd
CVE	CVE-2022-43441	16 Mar 202320:14	–	cve
Cvelist	CVE-2022-43441	16 Mar 202320:14	–	cvelist
Debian	[SECURITY] [DSA 5373-1] node-sqlite3 security update	14 Mar 202321:48	–	debian
Debian CVE	CVE-2022-43441	16 Mar 202320:14	–	debiancve

Vulners

Node

AND

node-sqlite3 node-sqlite3Match5.0.2+ds1-3+b1debian

AND

ghost sqlite3Range5.0.0–5.1.4js

Source	Link
github	www.github.com/TryGhost/node-sqlite3/commit/edb1934dd222ae55632e120d8f64552d5191c781
github	www.github.com/advisories/GHSA-jqv5-7xpx-qj74
github	www.github.com/TryGhost/node-sqlite3/security/advisories/GHSA-jqv5-7xpx-qj74
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2022-1645
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2022-1645

08 Aug 2023 10:34Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.1 - 9.8

EPSS0.06854

SSVC