Read the docs
TI-2026-65722 Aliases CVE-2026-103533GHSA-h4ph-4xq3-682r

David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

Priority MEDIUM 44CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
High
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schema_name results in path traversal. The attack may be launched remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult. The exploit has been made public and could be used. Upgrading to version 1.7.2 will fix this issue. You should upgrade the affected component.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0029 21st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed databasement (David-Crty): 1.7.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
David-Crtydatabasement1.7.0; 1.7.11.7.2Patch availableCNA
  • databasement VendorDavid-Crty Affected 1.7.0; 1.7.1 Fixed in 1.7.2 Patch available CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:david-crty:databasement:*:*:*:*:*:*:*:*———
  • cpe:2.3:a:david-crty:databasement:*:*:*:*:*:*:*:* Versions — — ·—

Remediation

  • Fix · CNA databasement (David-Crty) Fixed in 1.7.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-103533
  2. 2026-10-03 Alias added: GHSA-h4ph-4xq3-682r

References

Exploit 1

Patch 2

Other 1

  • TI-2026-85050 Databasement OIDC login bypass lets attackers take over accounts CVSS 4.0CRITICAL 9.2
  • TI-2026-70800 Argument injection in databasement allows remote code execution CVSS 3.1HIGH 8.8
  • TI-2026-65723 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control CVSS 4.0MEDIUM 5.3
  • TI-2026-76086 Missing authorization in David-Crty Databasement scheduled restore CVSS 4.0MEDIUM 5.1
  • TI-2026-63662 Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token CVSS 4.0CRITICAL 9.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences