Layer5 Meshery
6 CVEs affecting Layer5 Meshery. Latest disclosed: 2024-07-24. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-36535 | Critical | 9.8 | 2024-07-24 | Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. |
CVE-2023-46575 | Critical | 9.8 | 2023-11-24 | A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary c… |
CVE-2021-31856 | Critical | 9.8 | 2021-04-28 | A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles e… |
CVE-2024-29031 | High | 7.5 | 2024-03-21 | Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vul… |
CVE-2024-35182 | Medium | 5.9 | 2024-05-27 | Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vul… |
CVE-2024-35181 | Medium | 5.9 | 2024-05-27 | Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vul… |