Описание
Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.17 allows a remote attacker to obtain sensitive information via the order parameter of GetMeshSyncResources. Version 0.7.17 contains a patch for this issue.
Ссылки
- Patch
- Issue TrackingPatch
- ExploitThird Party Advisory
- Patch
- Issue TrackingPatch
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.7.17 (исключая)
cpe:2.3:a:layer5:meshery:*:*:*:*:*:*:*:*
EPSS
Процентиль: 78%
0.0119
Низкий
7.5 High
CVSS3
Дефекты
CWE-89
Связанные уязвимости
EPSS
Процентиль: 78%
0.0119
Низкий
7.5 High
CVSS3
Дефекты
CWE-89