Lucene search
+L

1 matches found

OSV
OSV
added 2024/12/03 4:15 p.m.19 views

AZL-53970 CVE-2024-53257 affecting package vitess for versions less than 19.0.4-7

Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...

4.9CVSS6.6AI score0.00428EPSS
SaveExploits0References1
Rows per page
Query Builder