Skip to content
OpenAdvisories

Product · vran-dev

databasir

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.6
    CVE-2022-31196

    Server-Side Request Forgery (SSRF) vulnerability in Databasir

    Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is triggered by a sending a **single** HTTP POST request to create a databaseType. By supplying a `jdbcDriverFileUrl` that r…

    vran-dev databasir
  • High 7.7
    CVE-2022-24862

    Server-Side Request Forgery in Databasir

    Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the corresponding JDBC driver download address will be…

    vran-dev databasir
  • High 7.4
    CVE-2022-24860

    Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.

    Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service back…

    vran-dev databasir