Skip to content
Threat Feed
Subscribe

Tag

Jdbc-Injection

1 brief RSS
high advisory

Unauthenticated JDBC Injection in AllData

AllData versions 0.7.1 and earlier are vulnerable to unauthenticated JDBC injection via the /jobJdbcDatasource/test endpoint, enabling remote attackers to perform arbitrary file read via the MySQL allowLoadLocalInfile parameter.

AllData web-vulnerability jdbc-injection data-exfiltration
1r 2t 1c