Executive brief
DbGate, a cross-platform database management tool, contains a security vulnerability in its REST and GraphQL components. An attacker can exploit this flaw to force the server to make unauthorized requests to internal or external systems. This could lead to the exposure of sensitive internal data or allow the attacker to interact with other services behind the corporate firewall.
Technical details
A server-side request forgery (SSRF) vulnerability exists in DbGate versions up to 7.1.4. The flaw is located in the apiServerUrl1 function within the packages/rest/src/openApiDriver.ts file of the REST/GraphQL component. A remote attacker with low privileges can manipulate this function to force the application to send crafted requests to arbitrary URLs. This can be used to scan internal networks, access metadata services, or bypass network access controls. Public exploit code is reportedly available, and the vendor has not yet released a patch or responded to the disclosure.
Affected products
- DbGate DbGate up to 7.1.4
Timeline
- 2026-04-13: advisory: Initial disclosure by VulDB and NVD
- 2026-04-13: disclosed: Public exploit made available