This repository has been archived by the owner on Oct 9, 2023. It is now read-only.

SQL Injection in List Filters

Low

eapolinario published GHSA-r847-6w6h-r8g4

Oct 27, 2023

Package

github.com/flyteorg/flyteadmin (Go)

Affected versions

< 1.1.124

Patched versions

1.1.124

Description

Impact

List endpoints on Flyte Admin has a SQL vulnerability where a malicious user can send a REST requests with custom SQL statements as list filters.

Patches

Has the problem been patched? What versions should users upgrade to?

Workarounds

The attacker needs to have access to the flyteadmin installation (typically either behind a VPN or authentication).

References

https://owasp.org/www-community/attacks/SQL_Injection#

Severity

Low

3.5

/ 10

CVSS base metrics

Attack vector

Adjacent

Attack complexity

Low

Privileges required

None

User interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N