Skip to main content

Whodb

2 CVEs product

Monthly

CVE-2025-24787 Go HIGH PATCH This Week

WhoDB is an open source database management tool. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection Nosql Injection Suse Whodb
NVD GitHub
CVSS 3.1
8.6
EPSS
0.2%
CVE-2025-24786 Go CRITICAL POC PATCH THREAT Emergency

WhoDB open-source database management tool allows unauthenticated path traversal to access any SQLite3 database on the host machine. Beyond data exposure, affected versions enable reading sensitive system files and executing arbitrary commands through SQLite extensions, achieving full server compromise.

Path Traversal Suse Whodb
NVD GitHub
CVSS 3.1
10.0
EPSS
51.3%
EPSS 0% CVSS 8.6
HIGH PATCH This Week

WhoDB is an open source database management tool. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection Nosql Injection Suse +1
NVD GitHub
EPSS 51% CVSS 10.0
CRITICAL POC PATCH THREAT Emergency

WhoDB open-source database management tool allows unauthenticated path traversal to access any SQLite3 database on the host machine. Beyond data exposure, affected versions enable reading sensitive system files and executing arbitrary commands through SQLite extensions, achieving full server compromise.

Path Traversal Suse Whodb
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy