Lucene search
+L

4 matches found

osv_ghsa
osv_ghsa
•added 2022/02/15 1:57 a.m.•54 views

GHSA-4FQX-74RV-638W Pivotal Concourse SQL Injection Vulnerability

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

7.5CVSS7.7AI score0.01091EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/02/15 1:57 a.m.•38 views

Pivotal Concourse SQL Injection Vulnerability

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

7.5CVSS8.1AI score0.01091EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2019/04/01 9:30 p.m.•30 views

CVE-2019-3792

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

7.5CVSS8.1AI score
SaveExploits0References1
Prion
Prion
•added 2019/04/01 9:30 p.m.•26 views

Sql injection

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data...

5CVSS7.7AI score0.01091EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder