Threats tagged 'ghsa-2rxp-23g6-8q6h'

A vulnerability in iFlytek astron-agent up to version 1.1.2 affects the DDL Whitelist Handler component, specifically in the file core/memory/database/api/v1/exec_ddl.py. This flaw causes an incomplete blacklist, potentially allowing unauthorized actions. The vulnerability can be exploited remotely and has publicly disclosed exploit code. The vendor has not responded to the disclosure. The CVSS score is 7.3, indicating a high severity.