Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2022/02/15 1:57 a.m.21 views

Pivotal Concourse SQL Injection Vulnerability

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

7.5CVSS8.1AI score0.00317EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2022/02/15 1:57 a.m.12 views

GHSA-4FQX-74RV-638W Pivotal Concourse SQL Injection Vulnerability

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

7.5CVSS7.7AI score0.00317EPSS
Exploits0References4
OSV
OSV
added 2019/04/01 9:30 p.m.10 views

CVE-2019-3792

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

7.5CVSS8.1AI score0.00317EPSS
Exploits0References1
Prion
Prion
added 2019/04/01 9:30 p.m.10 views

Sql injection

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

5CVSS7.7AI score0.00317EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder