Описание
SQL misconfiguration in the Gravitino UI, in versions 1.0.0 and below, can allow a malicious user to read or truncate files. Users are recommended to upgrade to version 1.0.0, which fixes this issue.
Ссылки
- Mailing ListVendor Advisory
- Mailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.5.0 (включая) до 1.0.0 (исключая)
cpe:2.3:a:apache:gravitino:*:*:*:*:*:*:*:*
EPSS
Процентиль: 44%
0.00561
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 5.4
github
около 2 месяцев назад
SQL misconfiguration in the Gravitino UI, in versions 1.0.0 and below, can allow a malicious user to read or truncate files. Users are recommended to upgrade to version 1.0.0, which fixes this issue.
EPSS
Процентиль: 44%
0.00561
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-89