| Package | Affected versions | Patched versions |
|---|---|---|
| davinci | = 0.3.0 |
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free