CVE-2024-35182

🗓️ 27 May 2024 18:18:40Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 97 Views🌐 WEB

Meshery open source manager SQL injection vulnerability may lead to arbitrary file write and unauthorized database access. Fixed in version 0.7.2

Reporter	Title	Published	Views	Family All 12
CNNVD	Meshery 安全漏洞	27 May 202400:00	–	cnnvd
Cvelist	CVE-2024-35182 GHSL-2024-014 Meshery SQL Injection vulnerability	27 May 202418:18	–	cvelist
EUVD	EUVD-2024-2591	3 Oct 202520:07	–	euvd
Github Security Blog	Meshery SQL Injection vulnerability	5 Aug 202421:29	–	github
NVD	CVE-2024-35182	27 May 202419:15	–	nvd
OSV	CVE-2024-35182 GHSL-2024-014 Meshery SQL Injection vulnerability	27 May 202418:18	–	osv
OSV	GHSA-H7CM-JVPP-69XF Meshery SQL Injection vulnerability	5 Aug 202421:29	–	osv
OSV	GO-2024-3051 Meshery SQL Injection vulnerability in github.com/layer5io/meshery	6 Aug 202422:40	–	osv
Positive Technologies	PT-2024-26363 · Meshery · Meshery	23 May 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-35182	23 May 202507:12	–	redhatcve

NVD

Vulners

Vulnrichment

Node

layer5 mesheryRange<0.7.22

[
  {
    "vendor": "meshery",
    "product": "meshery",
    "versions": [
      {
        "version": "< 0.7.22",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/models/events_persister.go
securitylab	www.securitylab.github.com/advisories/GHSL-2024-013_GHSL-2024-014_Meshery/
github	www.github.com/meshery/meshery/commit/b55f6064d0c6a965aee38f30281f99da7dc4420c
github	www.github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/handlers/events_streamer.go
github	www.github.com/meshery/meshery/pull/10280

Parameter	Position	Path	Description	CWE
sort	query param	/api/v2/events	SQL injection via unsanitized sort parameter used to build SQL query in events streamers; may allow arbitrary file write and data access.	CWE-89

02 Sep 2025 20:41Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.9 - 8.1

EPSS0.0011

SSVC

CWE-89