CVE-2025-63891

Published November 14th, 2025

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents (including schema and credential hashes) via an unauthenticated HTTP GET request to /obs/database/obs_db.sql.

lucascdsm/CVEs

Salve! esse é o repositório que vai constar as CVEs que for encontrando durante minha jornada

GitHub