CVE-2023-46575 Information

Description

A SQL injection vulnerability in Meshery before 0.6.179 allows a remote attacker to obtain sensitive information and execute arbitrary code via the order parameter.

Reference

https://meshery.io https://github.com/meshery/meshery/pull/9372 https://github.com/meshery/meshery/commit/ffe00967acfe4444a5db08ff3a4cafb9adf6013f https://github.com/meshery/meshery/compare/v0.6.178…v0.6.179