Layer5 Meshery 0.5.2 - SQL Injection
Layer5 Meshery 0.5.2 contains a SQL injection vulnerability in the REST API that allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint (order parameter in GetMesheryPatterns in models/meshery_pattern_persister.go).
mesheryPoC 已收录
CVSS9.8EPSS 83.5%