PT-2023-22193 · Vitess · Vitess

·

CVE-2023-29194

·

Publicado

2023-04-11

·

Atualizado

2023-04-25

CVSS v3.1

4.1

Média

VetorAV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Vitess versions prior to 16.0.1
Description The issue arises when a keyspace containing / characters is created, intentionally or inadvertently, causing errors when attempting to view keyspaces from VTAdmin or when using vtctldclient GetKeyspaces. Other keyspaces can still be administered using the CLI.
Recommendations For versions prior to 16.0.1, update to version 16.0.1 to resolve the issue. As a temporary workaround, delete the offending keyspace using a CLI client, such as vtctldclient --server ... DeleteKeyspace a/b.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

AZL-26295
CVE-2023-29194
GHSA-735R-HV67-G38F
GO-2023-1717

Produtos afetados

Vitess