← Database

CVE-2025-45237

HIGH CVSS: 7.5 Published: 2025-05-05 Modified: 2026-06-17

Description

Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.

Affected Platforms

Dbsyncer Project Dbsyncer

Weakness Type

CWE-284

References