What is GHSA-9jjc-grg5-67gj?

GHSA-9jjc-grg5-67gj is a security advisory published by GitHub Security Advisories with Critical severity. SQL injection vulnerability in Meshery

Which CVE IDs does GHSA-9jjc-grg5-67gj cover?

GHSA-9jjc-grg5-67gj covers the following CVE IDs: CVE-2023-46575. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9jjc-grg5-67gj?

GHSA-9jjc-grg5-67gj has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

Which products are affected by GHSA-9jjc-grg5-67gj?

GHSA-9jjc-grg5-67gj affects 1 product, including: go/github.com/layer5io/meshery:\u003c 0.6.179.

GHSA-9jjc-grg5-67gjCriticalCVSS 9.1

SQL injection vulnerability in Meshery

Vendor

GitHub Security Advisories

Published

November 24, 2023

Last Modified

November 28, 2023

🔗 CVE IDs covered (1)

CVE-2023-46575 →

📋 Description

A SQL injection vulnerability in Meshery before 0.6.179 allows a remote attacker to obtain sensitive information and execute arbitrary code via the order parameter.

🎯 Affected products1

go/github.com/layer5io/meshery:< 0.6.179

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2023-46575
https://github.com/meshery/meshery/pull/9372
https://github.com/meshery/meshery/commit/ffe00967acfe4444a5db08ff3a4cafb9adf6013f
https://github.com/meshery/meshery/compare/v0.6.178...v0.6.179
https://meshery.io
https://github.com/advisories/GHSA-9jjc-grg5-67gj