com.arcadedb:arcadedb-server
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read | com.arcadedb:arcadedb-server | Maven | High | Fix reported | |
| ArcadeDB vulnerable to cross-database authorization bypass and unsecured newly-created databases | com.arcadedb:arcadedb-server | Maven | Critical | Fix reported | |
| ArcadeDB has cross-database IDOR: /ts/*, /batch/*, Prometheus and Grafana handlers bypass authorization | com.arcadedb:arcadedb-server | Maven | High | Fix reported |