Test ID:	1.3.6.1.4.1.25623.1.0.126250
Category:	Web application abuses
Title:	SQLite 3.37.0 - 3.40.0 Information Disclosure Vulnerability
Summary:	SQLite is prone to an information disclosure vulnerability.
Description:	Summary: SQLite is prone to an information disclosure vulnerability. Vulnerability Insight: When relying on --safe flag, execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE. Affected Software/OS: SQLite versions 3.37.0 through 3.40.0. Solution: Update to version 3.40.1 or later. CVSS Score: 6.4 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-46908 https://security.gentoo.org/glsa/202311-03 https://news.ycombinator.com/item?id=33948588 https://sqlite.org/forum/forumpost/07beac8056151b2f https://sqlite.org/src/info/cefc032473ac5ad2
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.