← Database

CVE-2022-43441

HIGH CVSS: 8.1 Published: 2023-03-16 Modified: 2026-06-17

Description

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability.

Affected Platforms

Ghost Sqlite3

Weakness Type

CWE-915, CWE-913

References