Medium severity6.5NVD Advisory· Published May 17, 2023· Updated Jun 17, 2026
CVE-2023-31847
CVE-2023-31847
Description
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:davinci_project:davinci:0.3.0:rc:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/edp963/davinci/issues/2326nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.