What is CVE-2021-31856?

CVE-2021-31856 is a vulnerability in N/a. Published 2021-04-28.

Is CVE-2021-31856 known to be exploited?

13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2021-31856

A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint (order parameter in GetMesheryPatterns in models/meshery_pattern_persist…

EPSS: 0.790 (99.1th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

ssst0n3/CVE-2021-31856
20142995/nuclei-templates
ARPSyndicate/cvemon
ARPSyndicate/kenzer-templates
NaInSec/CVE-PoC-in-GitHub
SYRTI/POC_
WhooAmii/POC_
nomi-sec/PoC-in-GitHub
soosmile/POC
ssst0n3/my_

References

meshery.io (x_refsource_MISC)
github.com/layer5io/meshery/pull/2745 (x_refsource_MISC)

Frequently asked questions

What is CVE-2021-31856?: CVE-2021-31856 is a vulnerability in N/a. Published 2021-04-28.
Is CVE-2021-31856 known to be exploited?: 13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.