medium6.5
CVE-2023-31847
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client s…
Impact
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Davinci Project | Davinci | Version 0.3.0 |