Vitess allows HTML injection in /debug/querylogz & /debug/env

...

GO-2024-3306 Vitess allows HTML injection in /debug/querylogz and /debug/env in vitess.io/vitess

Vitess allows HTML injection in /debug/querylogz and /debug/env in vitess.io/vitess...

CVE-2024-53257

Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...

PT-2024-35696

Name of the Vulnerable Software and Affected Versions Vitess versions prior to 19.0.8 Vitess versions prior to 20.0.4 Vitess versions prior to 21.0.1 Description Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttabl...