Vulnerabilities

TI-2025-28744 CVE-2025-45237 · GHSA-3hrf-pq5f-6637

Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows…

HIGH 72

Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0046 Published 2025-05-05 No fix listed CWE-284

TI-2025-28743 CVE-2025-45236 · GHSA-x4jf-gq5v-q6vw

A stored cross-site scripting (XSS) vulnerability in the Edit Profile feature of DBSyncer…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in the Edit Profile feature of DBSyncer v2.0.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Nickname parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00273 Published 2025-05-05 No fix listed CWE-79

Vulnerabilities

Filters

Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows…

A stored cross-site scripting (XSS) vulnerability in the Edit Profile feature of DBSyncer…