Security Advisory

CVE-2017-11467

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-07-20 00:00:00

Last updated 2024-08-05 18:12:39

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.

← Browse all CVEs View on cve.org ↗