CVE-2023-46575 | BDVDB-2026-217697 Detail

Description#

A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the “order” parameter

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://meshery.io
https://github.com/meshery/meshery/pull/9372
https://github.com/meshery/meshery/commit/ffe00967acfe4444a5db08ff3a4cafb9adf6013f
https://github.com/meshery/meshery/compare/v0.6.178...v0.6.179

Exploit#

No public exploit known

History#

Version 12023-11-24Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.