CVE-2020-26207 — Unsafe deserialization in DatabaseSchemaViewer
DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted `.dbschema` file. The patch was relea…
Published: 2020-11-04 · CVSS: 8.0 · CVSS 3.1
DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted `.dbschema` file. The patch was released in v2.7.4.3. As a workaround, ensure `.dbschema` files from untrusted sources are not opened.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7