| عنوان | CodePhiliaX Chat2DB Chat2DB <= 0.3.7 Unrestricted Upload |
|---|
| الوصف | Chat2DB contains a critical remote code execution vulnerability in the JDBC driver upload functionality. Authenticated users can upload arbitrary JAR files without validation, which are then dynamically loaded and instantiated by the server when establishing database connections, allowing execution of malicious code. |
|---|
| المصدر | ⚠️ https://fx4tqqfvdw4.feishu.cn/docx/PgtzdpfoWoTR0yxB7P6cujGanih?from=from_copylink |
|---|
| المستخدم | xcxr (UID 86629) |
|---|
| ارسال | 09/03/2026 07:56 AM (7 أشهر منذ) |
|---|
| الاعتدال | 22/03/2026 01:02 PM (13 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 352432 [CodePhiliaX Chat2DB حتى 0.3.7 JDBC Driver Upload JdbcDriverController.java upload تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|