Description
Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.
High · 7.5
CVE-2025-45237
EUVD-2025-13446GHSA-3hrf-pq5f-6637
Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive…
Published May 5, 2025 · Updated May 6, 2025 · Assigned by mitre