Read the docs

meshery

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

meshery records in CISA KEV

No meshery vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Meshery 6 records HIGH

Records

6 records in Meshery · all components

TI-2021-11849 CVE-2021-31856 · GHSA-8xr7-2xrh-vgwj

A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker…

Priority HIGH 81

A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint (order parameter in GetMesheryPatterns in models/mesh…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.75384 Published 2021-04-28 No fix listed CWE-89
TI-2024-19213 CVE-2024-29031 · GHSA-652r-q29p-m25h

Meshery SQL Injection vulnerability

Priority HIGH 72

Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00959 Published 2024-03-21 Fixed in 0.7.17 CWE-89
TI-2024-23256 CVE-2024-35182 · GHSA-h7cm-jvpp-69xf

GHSL-2024-014 Meshery SQL Injection vulnerability

Priority HIGH 68

Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01565 Published 2024-05-27 Fixed in 0.7.22 CWE-89
TI-2024-23255 CVE-2024-35181 · GHSA-9f24-jrv4-f8g5

GHSL-2024-013 Meshery SQL Injection vulnerability

Priority LOW 38

Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01596 Published 2024-05-27 Fixed in 0.7.22 CWE-89
Open these records in search →