CVE-2020-26207
High
Description
DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted `.dbschema` file. The patch was released in v2.7.4.3. As a workaround, ensure `.dbschema` files from untrusted sources are not opened.
SeverityHigh
CVSS8.0
Exploit probability—
ProductDatabaseschemareader Project Dbschemareader
PublishedNov 4, 2020
First seenNov 4, 2020
Weakness typeCWE-502Deserialization of untrusted data
How to fix
Update
- databaseschemareader_project dbschemareader2.7.4.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| databaseschemareader_project dbschemareader | v < 2.7.4.3 | 2.7.4.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.