Description
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side.
Medium · 6.5
CVE-2023-31847
EUVD-2023-36137GHSA-46h7-97pw-fqv3
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary f…
Published May 17, 2023 · Updated Jan 22, 2025 · Assigned by mitre