CVE-2021-31856

A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint order parameter in GetMesheryPatterns in models/mesherypatternpersister.go...

CVE-2021-31856: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint order parameter in GetMesheryPatterns in models/mesherypatternpersister.go...

PT-2021-19551

Name of the Vulnerable Software and Affected Versions: Layer5 Meshery version 0.5.2 Description: A SQL Injection issue in the REST API allows an attacker to execute arbitrary SQL commands via the "/experimental/patternfiles" endpoint, specifically through the order parameter in GetMesheryPatterns...