Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
added 2022/02/15 1:57 a.m.27 views

Pivotal Concourse SQL Injection Vulnerability

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

7.5CVSS8.1AI score0.01091EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/02/15 1:57 a.m.43 views

GHSA-4FQX-74RV-638W Pivotal Concourse SQL Injection Vulnerability

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

7.5CVSS7.7AI score0.01091EPSS
SaveExploits0References4
OSV
OSV
added 2019/04/01 9:30 p.m.22 views

CVE-2019-3792

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

7.5CVSS8.1AI score
SaveExploits0References1
Prion
Prion
added 2019/04/01 9:30 p.m.16 views

Sql injection

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

5CVSS7.7AI score0.01091EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder