CVE-2026-34725

DbGate is cross-platform database manager. From version 7.0.0 to before version 7.1.5, a stored XSS vulnerability exists in DbGate because attacker-controlled SVG icon strings are rendered as raw HTML without sanitization. In the web UI this allows script execution in another user's browser; in the Electron desktop app this can escalate to local code execution because Electron is configured with nodeIntegration: true and contextIsolation: false. This issue has been patched in version 7.1.5.

CVSS v3 8.2 HIGH

8.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.5 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/dbgate/dbgate/commit/a7d2ed11f3f3d4dfb5d2e4e5467dedafa5fa947e
https://github.com/dbgate/dbgate/releases/tag/v7.1.5
https://github.com/dbgate/dbgate/security/advisories/GHSA-35xm-qvjg-8m42

Configurations

No configuration.

History

24 Jul 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) DbGate es un gestor de bases de datos multiplataforma. Desde la versión 7.0.0 hasta antes de la versión 7.1.5, existe una vulnerabilidad de XSS almacenado en DbGate porque las cadenas de iconos SVG controladas por el atacante se renderizan como HTML sin procesar sin sanitización. En la interfaz de usuario web, esto permite la ejecución de scripts en el navegador de otro usuario; en la aplicación de escritorio Electron, esto puede escalar a la ejecución de código local porque Electron está configurado con nodeIntegration: true y contextIsolation: false. Este problema ha sido parcheado en la versión 7.1.5.

02 Apr 2026, 18:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-04-02 18:16

Updated : 2026-07-24 21:10

NVD link : CVE-2026-34725

Mitre link : CVE-2026-34725

CVE.ORG link : CVE-2026-34725

JSON object : View

Products Affected

No product.

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2026-34725", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34725", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-02T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.5}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "dbgate", "product": "dbgate", "versions": [{"status": "affected", "version": ">= 7.0.0, < 7.1.5"}]}]}], "published": "2026-04-02T18:16:33.253", "references": [{"url": "https://github.com/dbgate/dbgate/commit/a7d2ed11f3f3d4dfb5d2e4e5467dedafa5fa947e", "source": "security-advisories@github.com"}, {"url": "https://github.com/dbgate/dbgate/releases/tag/v7.1.5", "source": "security-advisories@github.com"}, {"url": "https://github.com/dbgate/dbgate/security/advisories/GHSA-35xm-qvjg-8m42", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-79"}, {"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "DbGate is cross-platform database manager. From version 7.0.0 to before version 7.1.5, a stored XSS vulnerability exists in DbGate because attacker-controlled SVG icon strings are rendered as raw HTML without sanitization. In the web UI this allows script execution in another user's browser; in the Electron desktop app this can escalate to local code execution because Electron is configured with nodeIntegration: true and contextIsolation: false. This issue has been patched in version 7.1.5."}, {"lang": "es", "value": "DbGate es un gestor de bases de datos multiplataforma. Desde la versi\u00f3n 7.0.0 hasta antes de la versi\u00f3n 7.1.5, existe una vulnerabilidad de XSS almacenado en DbGate porque las cadenas de iconos SVG controladas por el atacante se renderizan como HTML sin procesar sin sanitizaci\u00f3n. En la interfaz de usuario web, esto permite la ejecuci\u00f3n de scripts en el navegador de otro usuario; en la aplicaci\u00f3n de escritorio Electron, esto puede escalar a la ejecuci\u00f3n de c\u00f3digo local porque Electron est\u00e1 configurado con nodeIntegration: true y contextIsolation: false. Este problema ha sido parcheado en la versi\u00f3n 7.1.5."}], "lastModified": "2026-07-24T21:10:00.143", "sourceIdentifier": "security-advisories@github.com"}