Database Toolset vulnerabilities

2 known vulnerabilities in Database Toolset from Neoslab. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Database Toolset: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-3065Apr 24, 2025NeoslabEPSS 1.13%

  The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the serve

• 8.6 High severity

  Database Toolset: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-32633Apr 11, 2025Neoslab

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in neoslab Database Toolset database-toolset allows Path Traversal.This issue affects Database Toolset: from n/a through <= 1.8.4.