CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-35181

Medium Severity
SVRS
30/100

CVSSv3
NA/10

EPSS
0.00059/1

CVE-2024-35181 is a SQL injection vulnerability affecting Meshery, a Kubernetes infrastructure manager. This flaw allows attackers to potentially write arbitrary files and modify sensitive data within the database, including session cookies and Kubernetes configurations. The vulnerability exists in versions prior to 0.7.22, specifically within the GetMeshSyncResourcesKinds function accessible via the /api/system/meshsync/resources/kinds API endpoint. While the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) of 30 indicates a moderate risk, signaling that although not critical, the vulnerability should still be addressed. Successful exploitation of CVE-2024-35181 could lead to unauthorized access and control over Meshery instances, impacting the security of managed Kubernetes environments. Users of Meshery are strongly advised to upgrade to version 0.7.22 or later to mitigate this security risk.

In The Wild
2024-05-27

2024-05-28
Eye Icon
SOCRadar
AI Insight

Description

CVE-2024-35181 is a vulnerability with a CVSS score of 0, indicating a low severity level. However, SOCRadar's SVRS assigns it a score of 30, highlighting the potential for exploitation. This discrepancy stems from SOCRadar's integration of additional vulnerability intelligence elements, such as social media chatter, news reports, and dark web data.

Key Insights

  • Active Exploitation: The vulnerability is actively exploited in the wild, posing an immediate threat to organizations.
  • Low CVSS Score: The CVSS score of 0 may underestimate the severity of the vulnerability, as it does not account for the broader context and potential impact.
  • SVRS Score of 30: The SVRS score of 30 indicates a moderate level of risk, warranting attention and prompt mitigation.
  • Threat Actors: Specific threat actors or APT groups exploiting this vulnerability have not been identified at this time.

Mitigation Strategies

  • Apply Software Updates: Install the latest software updates and patches to address the vulnerability.
  • Enable Intrusion Detection Systems (IDS): Implement IDS to detect and block malicious activity targeting the vulnerability.
  • Restrict Network Access: Limit access to vulnerable systems and services to reduce the attack surface.
  • Educate Users: Train users on security best practices and the importance of reporting suspicious activity.

Additional Information

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

CVE-2024-35181 | Meshery up to 0.7.21 API kinds sql injection (GHSL-2024-013)
vuldb.com2024-05-27
CVE-2024-35181 | Meshery up to 0.7.21 API kinds sql injection (GHSL-2024-013) | A vulnerability, which was classified as critical, was found in Meshery up to 0.7.21. This affects an unknown part of the file /api/system/meshsync/resources/kinds of the component API. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2024-35181. It is
vuldb.com
rss
forum
news

Social Media

CVE-2024-35181 Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version ... https://t.co/RsA6jYbJLE
0
0
0
GHSL-2024-013_GHSL-2024-014: SQL injection vulnerability in Meshery - CVE-2024-35181, CVE-2024-35182 https://t.co/3aFaI4t9iD
0
2
3

Affected Software

No affected software found for this CVE

References

ReferenceLink
[email protected]https://github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/handlers/meshsync_handler.go#L187
[email protected]https://github.com/meshery/meshery/commit/8e995ce21af02d32ef61689c1e1748a745917f13
[email protected]https://github.com/meshery/meshery/commit/b55f6064d0c6a965aee38f30281f99da7dc4420c
[email protected]https://github.com/meshery/meshery/pull/10207
[email protected]https://github.com/meshery/meshery/pull/10280
[email protected]https://securitylab.github.com/advisories/GHSL-2024-013_GHSL-2024-014_Meshery/
GITHUBhttps://securitylab.github.com/advisories/GHSL-2024-013_GHSL-2024-014_Meshery/

CWE Details

CWE IDCWE NameDescription
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence