Vulnerabilities

Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/system/fileView and /api/system/fileDownload endpoints that pass user-supplied file parameters directly to os.Open without p…

Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications.

Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications.

Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications.

A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the “order” parameter

A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint (order parameter in GetMesheryPatterns in models/mesh…