CVE-2024-35181 GHSL-2024-013 Meshery SQL Injection vulnerability

🗓️ 27 May 2024 18:37:18Reported by GitHub_MType

CVE-2024-35181 GHSL-2024-013 SQL Injection in Mesher

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
OSV	GHSA-9F24-JRV4-F8G5 Meshery SQL Injection vulnerability	5 Aug 202421:29	–	osv
OSV	GO-2024-3050 Meshery SQL Injection vulnerability in github.com/layer5io/meshery	6 Aug 202422:40	–	osv
OSV	CVE-2024-35181	27 May 202419:15	–	osv
Veracode	SQL Injection	30 May 202409:54	–	veracode
Vulnrichment	CVE-2024-35181 GHSL-2024-013 Meshery SQL Injection vulnerability	27 May 202418:18	–	vulnrichment
NVD	CVE-2024-35181	27 May 202419:15	–	nvd
CVE	CVE-2024-35181	27 May 202419:15	–	cve
Github Security Blog	Meshery SQL Injection vulnerability	5 Aug 202421:29	–	github

[
  {
    "vendor": "meshery",
    "product": "meshery",
    "versions": [
      {
        "version": "< 0.7.22",
        "status": "affected"
      }
    ]
  }
]

Source	Link
securitylab	www.securitylab.github.com/advisories/GHSL-2024-013_GHSL-2024-014_Meshery/
github	www.github.com/meshery/meshery/commit/8e995ce21af02d32ef61689c1e1748a745917f13
github	www.github.com/meshery/meshery/commit/b55f6064d0c6a965aee38f30281f99da7dc4420c
github	www.github.com/meshery/meshery/pull/10280
github	www.github.com/meshery/meshery/pull/10207
github	www.github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/handlers/meshsync_handler.go

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 May 2024 18:18Current

6Medium risk

Vulners AI Score6

CVSS35.9

EPSS0.00059

CWE-89