Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2020-26207

Unsafe deserialization in DatabaseSchemaViewer

Description

DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted `.dbschema` file. The patch was released in v2.7.4.3. As a workaround, ensure `.dbschema` files from untrusted sources are not opened.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

martinjw dbschemareader

  • < 2.7.4.3affected

References