27May
CVE-2024-35181 | Meshery up to 0.7.21 API kinds sql injection (GHSL-2024-013)
A vulnerability, which was classified as critical, was found in Meshery up to 0.7.21. This affects an unknown part of the file /api/system/meshsync/resources/kinds of the component API. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2024-35181. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.