Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

dbgate — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in dbgate, with AI-generated Chinese analysis, references, and POCs.

Vendor: dbgate

CVE IDTitleCVSSSeverityPublished
CVE-2026-47669 DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE CWE-22 9.3 Critical2026-07-23
CVE-2026-47670 DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection CWE-77 9.4 Critical2026-07-23
CVE-2026-47668 DbGate: Unauthenticated Remote Code Execution via JSON Script Runner CWE-20 10.0 Critical2026-07-23
CVE-2026-48017 DbGate: Remote Code Execution via functionName injection in loadReader endpoint CWE-94 8.8 High2026-06-15
CVE-2026-6216 DbGate SVG Icon String FontIcon.svelte cross site scripting CWE-79 3.5 Low2026-04-13
CVE-2026-6215 DbGate REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgery CWE-918 6.3 Medium2026-04-13
CVE-2026-34725 dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration CWE-94 8.3 High2026-04-02
CVE-2025-50185 DbGate allows Unauthorized File Access via CSV Plugin CWE-29 6.5 -2025-07-26
CVE-2025-50184 DbGate allows for File Traversal via file parameter CWE-29 7.5 -2025-07-26

All 9 known CVE vulnerabilities affecting dbgate with full Chinese analysis, references, and POCs where available.