Medium · 6.8 CVE-2024-49588 EUVD-2024-43734GHSA-wwc5-p8v7-jw92

Multiple authenticated SQL injections in oracle-sidecar

Published Nov 21, 2024 · Updated Nov 27, 2024 · Assigned by Palantir

Description

Multiple endpoints in `oracle-sidecar` in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections.

Vendor	Product	Affected	Fixed
Palantir	com.palantir.srx.prometheus.sls-oracle-sidecar:sls-oracle-sidecar	< 0.544.0, 0.347.0	0.544.0