Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/28 12:00 a.m.•3 views

CVE-2021-31856: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint order parameter in GetMesheryPatterns in models/mesherypatternpersister.go...

9.8CVSS6.3AI score0.75384EPSS
SaveExploits1References2
Rows per page
Query Builder