Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2022-46908

Опубликовано: 13 дек. 2022
Источник: msrc
CVSS3: 7.3
EPSS Низкий

Описание

SQLite through 3.40.0 when relying on --safe for execution of an untrusted CLI script does not properly implement the azProhibitedFunctions protection mechanism and instead allows UDF functions such as WRITEFILE.

EPSS

Процентиль: 28%
0.00097
Низкий

7.3 High

CVSS3

Связанные уязвимости

CVSS3: 7.3
ubuntu
почти 3 года назад

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

CVSS3: 7.3
redhat
почти 3 года назад

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

CVSS3: 7.3
nvd
почти 3 года назад

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

CVSS3: 7.3
debian
почти 3 года назад

SQLite through 3.40.0, when relying on --safe for execution of an untr ...

suse-cvrf
больше 2 лет назад

Security update for sqlite3

EPSS

Процентиль: 28%
0.00097
Низкий

7.3 High

CVSS3