Description
This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Request Forgery (CSRF) attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | sqlite-web | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | sqlite-web | <= 0.6.5 | — | GHSA-2j58-pwwv-x666 |
| PyPI | sqlite-web | all versions | — | PYSEC-2021-332 |