VDB

CVE-2024-40120

CVE-2024-40120 PUBLISHED

seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.

EPSS 0.15% · 35.2th percentile

Risk Scores

EPSS Score
0.15%
35.2th percentile

Affected Products

VendorProductVersions
Bitnamiseaweedfs3.68.0
Bitnamiseaweedfs3.68.0

Timeline

  • Jan 21, 1970 GitHub Gist PoC
  • May 13, 2025 PoC Published
  • May 16, 2025 CVE Published
  • May 17, 2025 EPSS Score
  • May 25, 2025 Coalition ESS Score
  • May 28, 2025 EPSS Score
  • Jun 9, 2025 EPSS Score
  • Jun 20, 2025 EPSS Score
  • Jun 21, 2025 Coalition ESS Score
  • Jul 1, 2025 EPSS Score
  • Jul 12, 2025 EPSS Score
  • Jul 24, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›