A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the “order” parameter
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/layer5io/meshery(Go) | 0 | 0.6.179 | N/A |
CVSS Metrics
