Lucene search
PRIOn knowledge basePRION:CVE-2022-23510HistoryDec 09, 2022 - 11:15 p.m.
Design/Logic Flaw
2022-12-0923:15:00
PRIOn knowledge base
www.prio-n.com
5
cube-js
security vulnerability
sql bypass
version 0.31.23
upgrade
downgrade
nvd
cube-js is a headless business intelligence platform. In version 0.31.23 all authenticated Cube clients could bypass SQL row-level security and run arbitrary SQL via the newly introduced /v1/sql-runner endpoint. This issue has been resolved in version 0.31.24. Users are advised to either upgrade to 0.31.24 or to downgrade to 0.31.22. There are no known workarounds for this vulnerability.
Related
osv
osv
CVE-2022-23510
2022-12-09 23:15:22
@cubejs-backend/api-gateway row level security bypass
2022-12-12 21:28:35
github
github
@cubejs-backend/api-gateway row level security bypass
2022-12-12 21:28:35
veracode
veracode
SQL Injection
2022-12-13 06:00:37
cve
cve
CVE-2022-23510
2022-12-09 23:15:22
nvd
nvd
CVE-2022-23510
2022-12-09 23:15:22
cvelist
cvelist
CVE-2022-23510 SQl injection in cube-js
2022-12-09 22:12:10