CVE-2021-23404 | BDVDB-2026-160362 Detail

Description#

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Request Forgery (CSRF) attack.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-09-08Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.