VDB
CVE-2024-45794
CVE-2024-45794
PUBLISHED
CVSS 8.300000190734863 HIGH
Devtron has SQL Injection in CreateUser API
EPSS 0.75% · 53.2th percentile
Risk Scores
CVSS 3.1
8.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
EPSS Score
0.75%
53.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| devtron-labs | devtron | < 0.7.2, < 0.7.2 |
| kubernetes | devtron | 0.7.2, 0.7.2 |
| devtron | devtron | 0, 0 |
| github.com | devtron-labs/devtron | 0, 0 |
Timeline
- Nov 7, 2024 CVE Published
- Nov 7, 2024 Coalition ESS Score
- Nov 7, 2024 PoC Published
- Nov 8, 2024 EPSS Score
- Nov 8, 2024 Coalition ESS Score
- Nov 26, 2024 EPSS Score
- Dec 16, 2024 EPSS Score
- Jan 3, 2025 EPSS Score
- Jan 22, 2025 EPSS Score
- Feb 28, 2025 EPSS Score
- Mar 18, 2025 EPSS Score
- Apr 1, 2025 Coalition ESS Score