CVE-2023-31847
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com