CVEs-PoC/2021/CVE-2021-31856.md

CVE-2021-31856

Description

A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint (order parameter in GetMesheryPatterns in models/meshery_pattern_persister.go).

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/SYRTI/POC_to_review
• https://github.com/WhooAmii/POC_to_review
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/soosmile/POC
• https://github.com/ssst0n3/CVE-2021-31856
• https://github.com/ssst0n3/my_vulnerabilities
• https://github.com/ssst0n3/ssst0n3
• https://github.com/trhacknon/Pocingit
• https://github.com/zecool/cve