DbGate vulnerabilities
We track 10 vulnerabilities in DbGate products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on September 28, 2026.
Latest DbGate vulnerabilities
- 7.3 High severity
dbgate: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file Endpoint. Such manipulation of the argument filePath/fileName leads to path traver
- 7.3 High severity
dbgate: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path travers
- 8.8 High severity
dbgate: External Control of File Name or Path
DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbitrary files via file:// scheme resolution. Attackers can exploit getJslFileName() to bypass directory containment and access sensitive files
- 9.4 Critical severity
dbgate: Improper Neutralization of Special Elements used in a Command
DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution (RCE). Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized `functionName` parame
- 9.3 Critical severity
dbgate: Improper Limitation of a Pathname to a Restricted Directory
DbGate is cross-platform database manager. In versions 7.1.8 and prior, the `unzipDirectory()` function in `packages/api/src/shell/unzipDirectory.js` (line 27) does not validate that extracted file paths stay within the output directory. A malicious ZIP with `
- 10.0 Critical severity
DbGate is cross-platform database manager.
DbGate is cross-platform database manager. In versions 7.1.8 and prior, DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `functionName` parameter of JSON script `assign` commands. The `functionName` val
- 8.8 High severity
dbgate: Improper Control of Generation of Code
DbGate is cross-platform database manager. In versions 7.1.8 and prior, the POST /runners/load-reader endpoint in DbGate accepts a functionName parameter that is directly interpolated into a JavaScript code template without any sanitization or validation. An a
- 8.2 High severity
dbgate: Improper Neutralization of Input During Web Page Generation
DbGate is cross-platform database manager. From version 7.0.0 to before version 7.1.5, a stored XSS vulnerability exists in DbGate because attacker-controlled SVG icon strings are rendered as raw HTML without sanitization. In the web UI this allows script exec
- 7.0 High severity
dbgate: Path Traversal: '..filename'
DbGate is cross-platform database manager. In versions 6.6.0 and below, DbGate allows unauthorized file access due to insufficient validation of file paths and types. A user with application-level access can retrieve data from arbitrary files on the system, re
- 7.1 High severity
dbgate: Path Traversal: '..filename'
DbGate is cross-platform database manager. In versions 6.4.3-premium-beta.5 and below, DbGate is vulnerable to a directory traversal flaw. The file parameter is not properly restricted to the intended uploads directory. As a result, the endpoint that lists fil