Azure Linux 3.0 Security Update: vitess (CVE-2024-53257)

The version of vitess installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53257 advisory. - Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env...

CVE-2024-53257 affecting package vitess for versions less than 19.0.4-7

CVE-2024-53257 affecting package vitess for versions less than 19.0.4-7. A patched version of the package is available...

CBL Mariner 2.0 Security Update: vitess (CVE-2024-53257)

The version of vitess installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53257 advisory. - Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env...

CVE-2024-53257 affecting package vitess for versions less than 17.0.7-6

CVE-2024-53257 affecting package vitess for versions less than 17.0.7-6. A patched version of the package is available...

CVE-2024-53257 Vitess allows HTML injection in /debug/querylogz & /debug/env

Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...

CVE-2024-53257

creationtimestamp| type| source ---|---|--- 2024-12-03 05:56:36+00:00| published-proof-of-concept| https://github.com/vitessio/vitess/security/advisories/GHSA-7mwh-q3xm-qh6p 2024-12-03 15:52:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113589692294110204 2024-12-03 18:10:19+00:00|...