Description

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

Remediation

References

CVE-2022-46908

Related Vulnerabilities

WordPress Plugin Telugu Bible Verse Daily Cross-Site Request Forgery (1.0)

WordPress Plugin Sucuri Security-Auditing, Malware Scanner and Security Hardening Cross-Site Scripting (1.7.15)

Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0697)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-28335)

Oracle Database Server CVE-2014-6567 Vulnerability (CVE-2014-6567)

Severity

Critical

Classification

CVE-2022-46908 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities