1 matches found
CVE-2021-31856: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint order parameter in GetMesheryPatterns in models/mesherypatternpersister.go...
9.8CVSS6.3AI score0.75384EPSS
SaveExploits1References2
20