Dbgate vulnerabilities
Products
- Dbgate 9
Newest
- dbgate DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save 5.3 Medium
- dbgate DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid 8.7 High
- dbgate DbGate: Remote Code Execution via functionName injection in loadReader endpoint 8.8 High
- dbgate DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection 9.4 Critical
- dbgate DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE 9.3 Critical
- dbgate DbGate: Unauthenticated Remote Code Execution via JSON Script Runner 10.0 Critical
- dbgate dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration 8.3 High
- dbgate DbGate allows Unauthorized File Access via CSV Plugin 7.0 High
- dbgate DbGate allows for File Traversal via file parameter 7.1 High