Skip to content
OpenAdvisories

Package · Go

github.com/rudderlabs/rudder-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-30625 Public exploit EPSS 86%

    rudder-server vulnerable to SQL Injection

    rudder-server is part of RudderStack, an open source Customer Data Platform (CDP). Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution (RCE) due to the `rudder` role in PostgresSQL having…

    rudderlabs rudder-server github.com/rudderlabs/rudder-server Go