Executive brief
WhoDB allows parameter injection in DB connection URIs leading to local file inclusion in github.com/clidey/whodb/core
Affected products
- Go github.com/clidey/whodb/core
Junglewise Threat Intelligence
CVE-2025-24787: GO-2025-3457 - WhoDB allows parameter injection in DB connection URIs leading to local file inclusion in github.com/clidey/whodb/core
CVE-2025-24787 · Severity: low · CVSS 3.1 · Published 2025-02-07
Technologies: github.com/clidey/whodb/core (Go). Vendors: Go.
Related threats
- GO-2025-3456 - WhoDB has a path traversal opening Sqlite3 database in github.com/clidey/whodb/core
- GO-2024-3350 - WhoDB Allows Unbounded Memory Consumption in Authentication Middleware Can Lead to Denial of Service in github.com/clidey/whodb/core
- WhoDB Allows Unbounded Memory Consumption in Authentication Middleware Can Lead to Denial of Service