https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T15:05:26.284637+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-121453 CVE-2026-121453 — SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint 2026-11-06T15:05:26.285785+00:00

Affected: dataease SQLBot

SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated workspace administrators to read files via an unsanitized filePath parameter. Attackers can supply absolute paths or ../ sequences to import CSV or spreadsheet files, including other workspaces' uploads and server files, into queryable excel_* tables.