CVE-2023-41891

LOW3.5EPSS 0.33%

SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

發布日:2023/10/27修改日:2024/5/20

描述

A malicious user can send a REST request to a List endpoint with filters that contain custom SQL statements. This can result in SQL injection.

受影響套件(2)

Go/github.com/flyteorg/flyteadminfrom 0, < 1.1.124
Go/github.com/flyteorg/flyteadminfrom 0, < 1.1.124

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	LOW3.5	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

參考連結(5)