CVE-2020-26207

2020-11-0422:15:12

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

JSON

DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted .dbschema file. The patch was released in v2.7.4.3. As a workaround, ensure .dbschema files from untrusted sources are not opened.

CPENameOperatorVersion
dbschemareadereq1.4.1.1
dbschemareadereq2.7.0.0
dbschemareadereq1.4.3.11
dbschemareadereq1.4.4.0
dbschemareadereq1.4.0.32
dbschemareadereq1.6.0.4
dbschemareadereq2.3.1.0
dbschemareadereq2.5.0.2
dbschemareadereq2.6.1.4
dbschemareadereq2.1.0.1

Name	Operator	Version
dbschemareader	eq	1.4.1.1
dbschemareader	eq	2.7.0.0
dbschemareader	eq	1.4.3.11
dbschemareader	eq	1.4.4.0
dbschemareader	eq	1.4.0.32
dbschemareader	eq	1.6.0.4
dbschemareader	eq	2.3.1.0
dbschemareader	eq	2.5.0.2
dbschemareader	eq	2.6.1.4
dbschemareader	eq	2.1.0.1