Threat Investigation
Request a demo

CVE-2023-46575

Critical

Description

A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the “order” parameter

SeverityCritical
CVSS9.8
Exploit probability—
ProductLayer5 Meshery
PublishedNov 24, 2023
First seenNov 24, 2023

How to fix

Update
  • layer5 meshery0.6.179 or later
  • github.com/layer5io/meshery0.6.179 or later

Affected products

ProductAffected versionsFixed in
layer5 mesheryv < 0.6.1790.6.179
github.com/layer5io/mesheryGov < 0.6.1790.6.179

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.