What is GHSA-q97m-8853-pq76?

GHSA-q97m-8853-pq76 is a security advisory published by GitHub Security Advisories with Medium severity. SeaweedFS Vulnerable to SQL Injection

Which CVE IDs does GHSA-q97m-8853-pq76 cover?

GHSA-q97m-8853-pq76 covers the following CVE IDs: CVE-2024-40120. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q97m-8853-pq76?

GHSA-q97m-8853-pq76 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-q97m-8853-pq76?

GHSA-q97m-8853-pq76 affects 1 product, including: go/github.com/seaweedfs/seaweedfs:\u003c 0.0.0-20240625155419-9ac102336200.

GHSA-q97m-8853-pq76MediumCVSS 6.5

SeaweedFS Vulnerable to SQL Injection

Vendor

GitHub Security Advisories

Published

May 16, 2025

Last Modified

May 16, 2025

🔗 CVE IDs covered (1)

CVE-2024-40120 →

📋 Description

seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.

🎯 Affected products1

go/github.com/seaweedfs/seaweedfs:< 0.0.0-20240625155419-9ac102336200

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2024-40120
https://github.com/seaweedfs/seaweedfs/issues/5710
https://gist.github.com/sud0why/1b2115c1d644bd3db1c1b3f16684a78c
https://github.com/seaweedfs/seaweedfs/commit/9ac1023362000f6e8e58c9d278653f5926a0d90e
https://github.com/seaweedfs/seaweedfs/releases/tag/3.69
https://github.com/advisories/GHSA-q97m-8853-pq76