CVE-2024-40120
seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.
Résumé
SeaweedFS Vulnerable to SQL Injection
Description d'origine
La description telle que publiée par la source (souvent en anglais).
seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Go
github.com/seaweedfs/seaweedfs
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.0-20240625155419-9ac102336200"}]}]
Bitnami
seaweedfs
[{"type":"SEMVER","events":[{"introduced":"3.68.0"},{"fixed":"3.69.0"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- report github.com
- web github.com
- web gist.github.com
- web github.com