Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-993x-6558-2xmj

Опубликовано: 12 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

EPSS

Процентиль: 28%
0.00097
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 7.3
ubuntu
почти 3 года назад

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

CVSS3: 7.3
redhat
почти 3 года назад

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

CVSS3: 7.3
nvd
почти 3 года назад

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

CVSS3: 7.3
msrc
почти 3 года назад

SQLite through 3.40.0 when relying on --safe for execution of an untrusted CLI script does not properly implement the azProhibitedFunctions protection mechanism and instead allows UDF functions such as WRITEFILE.

CVSS3: 7.3
debian
почти 3 года назад

SQLite through 3.40.0, when relying on --safe for execution of an untr ...

EPSS

Процентиль: 28%
0.00097
Низкий

9.8 Critical

CVSS3