ApacheSkywalking
2 matches found
CVE-2020-9483
CVE-2020-9483 : A SQL injection in Apache SkyWalking storage when using H2/MySQL/TiDB backends, via a metadata GraphQL query. The root cause is improper SQL parameter handling in the storage implementations (versions 6.0.0–6.6.0 and 7.0.0). This could allow an attacker to access unexpected data b...
7.5CVSS7.8AI score0.34613EPSS
Save
CVE-2026-30778
Apache SkyWalking versions 9.7.0 through 10.3.0 are vulnerable to a security flaw where the OAP /debugging/config/dump endpoint may leak sensitive configuration information related to MySQL or PostgreSQL . This exposure can potentially expose critical database credentials or settings. To remediat...
7.5CVSS5.7AI score0.00589EPSS
Save