Vran-dev vulnerabilities
We track 4 vulnerabilities in Vran-dev products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 2, 2022.
Latest Vran-dev vulnerabilities
- 7.5 High severity
databasir: Server-Side Request Forgery
Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is triggered by a sending a **single** HTTP POST request to create a databaseType. By supplying a `jdbcDriverFileUrl` that re
- 7.7 High severity
databasir: Server-Side Request Forgery
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the corresponding JDBC driver download address will be
- 8.8 High severity
Databasir is a team-oriented relational database model document management platform.
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has remote code execution vulnerability. JDBC drivers are not validated prior to use and may be provided by users of the system. This can lead to code execution
- 9.8 Critical severity
databasir: Use of Hard-coded Credentials
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service backg