CVE-2022-24862

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the corresponding JDBC driver download address will be downloaded first, but this address will return a response page with complete error information when accessing a non-existent URL. Attackers can take advantage of this feature for SSRF.

• CWE-918
• CWE-918

• https://github.com/vran-dev/databasir/releases/tag/v1.0.2Release Notes, Third Party Advisory
• https://github.com/vran-dev/databasir/security/advisories/GHSA-r8m9-r74j-vc6mExploit, Third Party Advisory
• https://github.com/vran-dev/databasir/releases/tag/v1.0.2Release Notes, Third Party Advisory
• https://github.com/vran-dev/databasir/security/advisories/GHSA-r8m9-r74j-vc6mExploit, Third Party Advisory

Published

Apr 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24857django-mfa3 is a library that implements multi factor authen…8.8
• CVE-2022-24858next-auth v3 users before version 3.29.2 are impacted. next-…6.1
• CVE-2022-24859PyPDF2 is an open source python PDF library capable of split…5.5
• CVE-2022-2486A vulnerability, which was classified as critical, was found…9.8
• CVE-2022-24860Databasir is a team-oriented relational database model docum…9.8
• CVE-2022-24861Databasir is a team-oriented relational database model docum…8.8
• CVE-2022-24863http-swagger is an open source wrapper to automatically gene…7.5
• CVE-2022-24864Origin Protocol is a blockchain based project. The Origin Pr…5.4
• CVE-2022-24865HumHub is an Open Source Enterprise Social Network. In affec…6.5
• CVE-2022-24866Discourse Assign is a plugin for assigning users to a topic …4.3
• CVE-2022-24867GLPI is a Free Asset and IT Management Software package, tha…7.5
• CVE-2022-24868GLPI is a Free Asset and IT Management Software package, tha…5.4