Meshery vulnerabilities

3 known vulnerabilities in Meshery from Layer5. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  meshery: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-35182May 27, 2024MesheryEPSS 1.57%

  Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.22 may lead to arbitrary file write by using a SQL injecti

• 7.5 High severity

  meshery: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-29031Mar 21, 2024Meshery

  Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.17 allows a remote attacker to obtain sensitive informatio

• 9.8 Critical severity

  Meshery: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-46575Nov 24, 2023Layer5EPSS 1.28%

  A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the “order” parameter