Skip to content
OpenAdvisories
Critical · 9.1 CVE-2023-46575 EUVD-2023-2939GHSA-9jjc-grg5-67gj

SQL injection vulnerability in Meshery

Published Nov 24, 2023 · Updated Aug 2, 2024 · Assigned by mitre

Description

A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the “order” parameter

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/layer5io/meshery < 0.6.179 0.6.179 GHSA-9jjc-grg5-67gj

References