CVE-2024-29031 in Mesheryinfo

Zusammenfassung

von MITRE • 22.03.2024

Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.17 allows a remote attacker to obtain sensitive information via the `order` parameter of `GetMeshSyncResources`. Version 0.7.17 contains a patch for this issue.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Zuständig

GitHub, Inc.

Reservieren

14.03.2024

Veröffentlichung

22.03.2024

Moderieren

akzeptiert

Eintrag

VDB-257683

CPE

bereit

EPSS

0.00951

KEV

nein

Aktivitäten

very low

Quellen

Might our Artificial Intelligence support you?

Check our Alexa App!