edp963/davinci

edp963/davinci

edp963.github.io

Releases14

Frequency2 months 3 weeks

Last Releaseover 5 years ago

Stars5K

Davinci is a DVsaaS (Data Visualization as a Service) Platform

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2023-31847NVD↗	= 0.3.0	May 17, 2023Wednesday, 17 May 2023, 01:15	6.5 MEDIUM	—
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side.
CVE-2023-31848NVD↗	= 0.3.0	May 17, 2023Wednesday, 17 May 2023, 00:15	8.8 HIGH	—
davinci 0.3.0-rc is vulnerable to Server-side request forgery (SSRF).
CVE-2023-24206NVD↗	= 0.3.0	Feb 27, 2023Monday, 27 February 2023, 13:15	9.8 CRITICAL	—
Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function.