358 matches found
AZL-53977 CVE-2024-53257 affecting package vitess for versions less than 17.0.7-7
Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...
CVE-2024-53257 Vitess allows HTML injection in /debug/querylogz & /debug/env
Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...
CVE-2024-53257
Vitess CVE-2024-53257 affects the vtgate/vttablet status pages (/debug/querylogz and /debug/env). Input is not escaped, allowing HTML injection on monitoring pages because those endpoints render with text/template. Fixed in Vitess releases 19.0.8, 20.0.4, and 21.0.1. Exploitation details are prov...
CVE-2024-53257 Vitess allows HTML injection in /debug/querylogz & /debug/env
Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...
CVE-2024-53257 Vitess allows HTML injection in /debug/querylogz & /debug/env
Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...
Vitess 安全漏洞
Vitess is a database clustering system for horizontally scaling MySQL from the Vitess open source. A security vulnerability exists in Vitess that stems from the /debug/querylogz and /debug/env pages of vtgate and vttablet not properly escaping user input...
CVE-2024-21538 vulnerabilities
Vulnerabilities for packages: kibana, arangodb, lerna, eslint, opensearch-dashboards-fips, renovate, argo-workflows, graalvm, tileserver-gl, py3-captum, ts-patch, kubeflow-katib, pgadmin4, node-gyp, sqlpad, tileserver-gl-fips, airflow, opensearch-dashboards...
GHSA-PXG6-PF52-XH8X vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, kibana, kubeflow-pipelines, opensearch-dashboards-fips, argo-workflows, gitlab-rails-ce, jitsucom-jitsu, kubeflow-katib, sqlpad, gitlab-rails-ce-fips, thingsboard, opensearch-dashboards...
CVE-2024-47764 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, kibana, kubeflow-pipelines, opensearch-dashboards-fips, argo-workflows, gitlab-rails-ce, jitsucom-jitsu, kubeflow-katib, sqlpad, gitlab-rails-ce-fips, thingsboard, opensearch-dashboards...
GHSA-GCX4-MW62-G8WM vulnerabilities
Vulnerabilities for packages: arangodb, vite...
CVE-2024-47068 vulnerabilities
Vulnerabilities for packages: arangodb, vite...
GHSA-9WV6-86V2-598J vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, kubeflow-pipelines, arangodb, opensearch-dashboards-fips, argo-workflows, sqlpad, thingsboard, opensearch-dashboards...
CVE-2024-45296 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, kubeflow-pipelines, arangodb, opensearch-dashboards-fips, argo-workflows, sqlpad, thingsboard, opensearch-dashboards...
CVE-2024-24786 affecting package vitess for versions less than 19.0.4-2
CVE-2024-24786 affecting package vitess for versions less than 19.0.4-2. An upgraded version of the package is available that resolves this issue...
CVE-2017-14623 affecting package vitess for versions less than 19.0.4-2
CVE-2017-14623 affecting package vitess for versions less than 19.0.4-2. A patched version of the package is available...
CVE-2023-45288 affecting package vitess for versions less than 19.0.4-2
CVE-2023-45288 affecting package vitess for versions less than 19.0.4-2. An upgraded version of the package is available that resolves this issue...
CVE-2023-3978 affecting package vitess for versions less than 19.0.4-2
CVE-2023-3978 affecting package vitess for versions less than 19.0.4-2. An upgraded version of the package is available that resolves this issue...
CVE-2023-3978 affecting package vitess for versions less than 17.0.7-1
CVE-2023-3978 affecting package vitess for versions less than 17.0.7-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-24786 affecting package vitess for versions less than 17.0.7-1
CVE-2024-24786 affecting package vitess for versions less than 17.0.7-1. An upgraded version of the package is available that resolves this issue...