The following issues were found
src/sqlitedb.h
1 issues
open - Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents?
Security
Line: 85
Column: 10
CWE codes:
362
explicit DBBrowserDB();
~DBBrowserDB () override = default;
bool open(const QString& db, bool readOnly = false);
bool attach(const QString& filename, QString attach_as = QString());
/**
detaches a previously attached database identified with its alias-name
Reported by FlawFinder.
src/sqlitetablemodel.cpp
1 issues
open - Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents?
Security
Line: 914
Column: 34
CWE codes:
362
// If it's a URL, open the file and paste the content in the current cell
QList<QUrl> urls = data->urls();
QFile file(urls.first().toLocalFile());
if(file.exists() && file.open(QFile::ReadOnly))
{
setData(index(row, column, parent), file.readAll());
return true;
}
} else if(data->hasText()) {
Reported by FlawFinder.