CVE-2022-24861criticalCWE-20

CVE-2022-24861: falha crítica em vran-dev databasir

Remote Code Execution in Databasir

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar databasir

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.9epss 3.0%
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has remote code execution vulnerability. JDBC drivers are not validated prior to use and may be provided by users of the system. This can lead to code execution by any basic user who has access to the system. Users are advised to upgrade. There are no known workarounds to this issue.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
vran-dev · databasir
CVEs relacionadas — vran-dev databasir

No mesmo produto, das mais perigosas para as menos.

CVE-2022-24860HIGHDatabasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.EPSS 1.7%CVE-2022-31196HIGHServer-Side Request Forgery (SSRF) vulnerability in DatabasirEPSS 1.1%CVE-2022-24862HIGHServer-Side Request Forgery in DatabasirEPSS 1.0%