CVE-2022-24861

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has remote code execution vulnerability. JDBC drivers are not validated prior to use and may be provided by users of the system. This can lead to code execution by any basic user who has access to the system. Users are advised to upgrade. There are no known workarounds to this issue.

• CWE-20
• CWE-20

• https://github.com/vran-dev/databasir/commit/ca22a8fef7a31c0235b0b2951260a7819b89993bPatch, Third Party Advisory
• https://github.com/vran-dev/databasir/pull/103Patch, Third Party Advisory
• https://github.com/vran-dev/databasir/security/advisories/GHSA-5r2v-wcwh-7xmpExploit, Third Party Advisory
• https://github.com/vran-dev/databasir/commit/ca22a8fef7a31c0235b0b2951260a7819b89993bPatch, Third Party Advisory
• https://github.com/vran-dev/databasir/pull/103Patch, Third Party Advisory
• https://github.com/vran-dev/databasir/security/advisories/GHSA-5r2v-wcwh-7xmpExploit, Third Party Advisory

Published

Apr 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24856FlyteConsole is the web user interface for the Flyte platfor…7.5
• CVE-2022-24857django-mfa3 is a library that implements multi factor authen…8.8
• CVE-2022-24858next-auth v3 users before version 3.29.2 are impacted. next-…6.1
• CVE-2022-24859PyPDF2 is an open source python PDF library capable of split…5.5
• CVE-2022-2486A vulnerability, which was classified as critical, was found…9.8
• CVE-2022-24860Databasir is a team-oriented relational database model docum…9.8
• CVE-2022-24862Databasir is a team-oriented relational database model docum…7.7
• CVE-2022-24863http-swagger is an open source wrapper to automatically gene…7.5
• CVE-2022-24864Origin Protocol is a blockchain based project. The Origin Pr…5.4
• CVE-2022-24865HumHub is an Open Source Enterprise Social Network. In affec…6.5
• CVE-2022-24866Discourse Assign is a plugin for assigning users to a topic …4.3
• CVE-2022-24867GLPI is a Free Asset and IT Management Software package, tha…7.5