CVE-2020-26207

ALTO 8.0CVE-2020-26207 · Published 04/11/2020 · updated 17/06/2026

In breve

CVE-2020-26207 è una vulnerabilità ALTO (CVSS 8.0) che riguarda dbschemareader (databaseschemareader project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.1%, superiore al 81.8% delle vulnerabilità.
Correzione: aggiornare a 2.7.4.3 o successiva.

Package	Affected versions	Patched versions
dbschemareader databaseschemareader_project	`< 2.7.4.3`	`2.7.4.3`

Description

DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted `.dbschema` file. The patch was released in v2.7.4.3. As a workaround, ensure `.dbschema` files from untrusted sources are not opened.

References

martinjw/dbschemareader commit 4c0ab7b · Patch
martinjw/dbschemareader release 2.7.4.3 · Third Party Advisory
martinjw/dbschemareader security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free