vitess.io/vitess vulnerabilities (Go)
8 vulnerabilities.
-
vitess.io/vitessGo Vitess vttablet /twopcz reflected XSS 9.8 Critical -
vitess.io/vitessGo Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data 5.3 Medium -
vitess.io/vitessGo Vitess users with backup storage access can write to arbitrary file paths on restore 9.3 Critical -
vitess.io/vitessGo Vitess users with backup storage access can gain unauthorized access to production deployment environments 8.4 High -
vitess.io/vitessGo Vitess allows HTML injection in /debug/querylogz & /debug/env 4.9 Medium -
vitess.io/vitessGo Vitess vulnerable to infinite memory consumption and vtgate crash 4.9 Medium -
vitess.io/vitessGo Vitess VTAdmin users that can create shards can deny access to other functions 4.1 Medium -
vitess.io/vitessGo vitess allows users to create keyspaces that can deny access to already existing keyspaces 4.1 Medium