CVE-2023-31847 (published 2023-05-17T00:00:00)
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a