Lucene search
+L

81 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/30 12:00 a.m.•3 views

CVE-2020-9483: Improper Neutralization of Special Elements used in an SQL Command

Resolved When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is a SQL injection vulnerability, which allows to access unpexcted data. Apache SkyWalking 6.0.0 to 6.6.0, 7.0.0 H2/MySQL/TiDB storage implementations don't use the appropriate way to...

7.5CVSS5.8AI score0.34613EPSS
SaveExploits2References2
Rows per page
Query Builder