PT-2023-22193 · Vitess · Vitess
CVSS v3.1
4.1
Média
| Vetor | AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
Vitess versions prior to 16.0.1
Description
The issue arises when a keyspace containing
/ characters is created, intentionally or inadvertently, causing errors when attempting to view keyspaces from VTAdmin or when using vtctldclient GetKeyspaces. Other keyspaces can still be administered using the CLI.Recommendations
For versions prior to 16.0.1, update to version 16.0.1 to resolve the issue.
As a temporary workaround, delete the offending keyspace using a CLI client, such as
vtctldclient --server ... DeleteKeyspace a/b.Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Vitess