The vulnerability of the “fields” parameter on the Pangeo Radar platform’s separate data storage and management system allows a hacker to execute arbitrary SQL queries against the database.

The vulnerability of the “fields” parameter on the Pangeo Radar platform’s separate data storage and management system is related to the lack of measures taken to neutralize special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queri...

PT-2024-5505

Name of the Vulnerable Software and Affected Versions Pangeo Radar affected versions not specified Description The issue is related to the fields parameter of the Pangeo Radar platform, which fails to neutralize special elements used in SQL queries. This can be exploited by a remote attacker to...