Threats tagged 'ghsa-fghj-qqgj-7rxf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-121453SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated Medium5.12026-11-03GCVE DatabaseCVE-2026-121453 SQLBot versions through 1.10.3 have a path traversal vulnerability in the importToDb endpoint. Authenticated workspace administrators can exploit this flaw by supplying crafted filePath parameters to read arbitrary files on the server, including files from other workspaces. This allows importing CSV or spreadsheet files from unintended locations into queryable tables. Report on CVE-2026-121453 Vulnerability CWE-22 #ghsa-fghj-qqgj-7rxf	GCVE Database	2026-11-03

Page 1 of 1