CVE-2024-29031
Meshery SQL Injection vulnerability
Résumé
Meshery SQL Injection vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.17 allows a remote attacker to obtain sensitive information via the order parameter of GetMeshSyncResources. Version 0.7.17 contains a patch for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory securitylab.github.com
- patch github.com
- patch github.com