Unrated severityNVD Advisory· Published Apr 20, 2022· Updated Apr 22, 2025
Server-Side Request Forgery in Databasir
CVE-2022-24862
Description
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the corresponding JDBC driver download address will be downloaded first, but this address will return a response page with complete error information when accessing a non-existent URL. Attackers can take advantage of this feature for SSRF.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/vran-dev/databasir/releases/tag/v1.0.2mitrex_refsource_MISC
- github.com/vran-dev/databasir/security/advisories/GHSA-r8m9-r74j-vc6mmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.