CVE-2022-24861 - CVE House

Back to Database

Status published Critical CVE-2022-24861

Remote Code Execution in Databasir

9.9 CVSS

Vulnerability Description

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has remote code execution vulnerability. JDBC drivers are not validated prior to use and may be provided by users of the system. This can lead to code execution by any basic user who has access to the system. Users are advised to upgrade. There are no known workarounds to this issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-24861

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from vran-dev

View All →

Server-Side Request Forgery (SSRF) vulnerability in Databasir

Server-Side Request Forgery in Databasir

Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.

Affected Vendor

vran-dev

View all reports →

Affected Software

databasir

Vulnerable Versions:

< 1.0.2

Timeline

Official Publish: April 20th, 2022

Last Modified: April 22nd, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1213 Data from Information Repositories

T1565.002 Stored Data Manipulation