Vulnerabilities

TI-2023-12940 CVE-2023-28394 · GHSA-wcc7-8mhx-xfg9

OS command injection in Beekeeper Studio

MEDIUM 43

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01388 Published 2023-05-23 Fixed in 3.9.9 CWE-78

TI-2022-21052 CVE-2022-43143 · GHSA-gh54-fxmf-wwvq

A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to…

HIGH 76

A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error modal container.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0093 Published 2022-11-21 No fix listed CWE-79

TI-2022-09617 CVE-2022-26174 · GHSA-fvmg-rxw4-v65c

A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers…

MEDIUM 47

A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02422 Published 2022-03-21 No fix listed CWE-116

Vulnerabilities

Filters

OS command injection in Beekeeper Studio

A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to…

A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers…