CVE-2024-40120
seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.
Summary
SeaweedFS Vulnerable to SQL Injection
Original description
The description as published by the source.
seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
github.com/seaweedfs/seaweedfs
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.0-20240625155419-9ac102336200"}]}]
Bitnami
seaweedfs
[{"type":"SEMVER","events":[{"introduced":"3.68.0"},{"fixed":"3.69.0"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- report github.com
- web github.com
- web gist.github.com
- web github.com