Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-993x-6558-2xmj

Опубликовано: 12 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

EPSS

Процентиль: 26%
0.00088
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 7.3
ubuntu
больше 2 лет назад

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

CVSS3: 7.3
redhat
больше 2 лет назад

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

CVSS3: 7.3
nvd
больше 2 лет назад

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

CVSS3: 7.3
msrc
больше 2 лет назад

Описание отсутствует

CVSS3: 7.3
debian
больше 2 лет назад

SQLite through 3.40.0, when relying on --safe for execution of an untr ...

EPSS

Процентиль: 26%
0.00088
Низкий

9.8 Critical

CVSS3