CVEs (3)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side. |
davinci 0.3.0-rc is vulnerable to Server-side request forgery (SSRF). |
Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function. |