Advisories · Technology
dbgate.
Every CVE that names dbgate among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save
- dbgate
- Broken access control
- CVSS 6.9 Medium
dbgate Files Endpoint runners.js files path traversal
- dbgate
- Path traversal
- CVSS 6.9 Medium
dbgate Export databaseConnections.js exportModelSql path traversal
- dbgate
- Path traversal
- CVSS 6.9 Medium
dbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversal
- dbgate
- Path traversal
- CVSS 6.9 Medium
dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal
- dbgate
- Path traversal
- CVSS 6.9 Medium
dbgate Archive Link Creation archive.js createLink path traversal
- dbgate
- Path traversal
- CVSS 5.3 Medium
DbGate files-style Endpoint files.js fs.readFile path traversal
- DbGate
- Path traversal
- CVSS 5.3 Medium
DbGate JSON Runner runners.js code injection
- DbGate
- Other injection
- Code injection
- CVSS 8.7 High
DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid
- dbgate
- Path traversal
- CVSS 5.3 Medium
DbGate REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgery
- DbGate
- Server-side request forgery (SSRF)
- CVSS 7.0 High
DbGate allows Unauthorized File Access via CSV Plugin
- dbgate
- CWE-29
- CVSS 7.1 High
DbGate allows for File Traversal via file parameter
- dbgate
- CWE-29