Vulnerability Report: GO-2023-1717
- CVE-2023-29194, GHSA-735r-hv67-g38f
- Affects: vitess.io/vitess
- Published: Apr 12, 2023
- Modified: May 20, 2024
Users can create a keyspace containing '/'. Future attempts to view keyspaces from some tools (including VTAdmin and "vtctldclient GetKeyspaces") receive an error.
For detailed information about this vulnerability, visit https://github.com/vitessio/vitess/security/advisories/GHSA-735r-hv67-g38f.
Affected Packages
-
PathGo VersionsSymbols
-
before v0.16.1
-
before v0.16.1
Aliases
References
- https://github.com/vitessio/vitess/security/advisories/GHSA-735r-hv67-g38f
- https://github.com/vitessio/vitess/commit/adf10196760ad0b3991a7aa7a8580a544e6ddf88
- https://github.com/vitessio/vitess/commits/v0.16.1/
- https://vuln.go.dev/ID/GO-2023-1717.json
Credits
- @AdamKorcz, @ajm188
Feedback
See anything missing or incorrect?
Suggest an edit to this report.