What’s Vulnerable › Vulnerabilities

CVE-2021-31856

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 75.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-04-28 · updated 2026-06-17
• Weakness: CWE-89

Description

A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint (order parameter in GetMesheryPatterns in models/meshery_pattern_persister.go).

Affected products

• meshery: 0.5.2

References

• https://github.com/layer5io/meshery/pull/2745
• https://meshery.io
• https://github.com/layer5io/meshery/pull/2745
• https://meshery.io

Get alerted when CVE-2021-31856 or the next vulnerability affects your stack