Lucene search

K
osvGoogleOSV:BIT-SQLITE-2022-46908
HistoryMar 06, 2024 - 11:05 a.m.

BIT-sqlite-2022-46908

2024-03-0611:05:50
Google
osv.dev
13
sqlite
udf functions
writefile
cli script
protection mechanism

0.001 Low

EPSS

Percentile

19.0%

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.

CPENameOperatorVersion
sqlitelt3.40.1
sqlitege3.37.0