Vulnetix
Try Vulnetix Request Demo
CVE-2024-45794 PUBLISHED CVSS 8.300000190734863 HIGH

devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with minimum permission) could utilize and exploit SQL Injection to allow the execution of malicious SQL queries via CreateUser API (/orchestrator/user). This issue has been addressed in version 0.7.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

EPSS 0.31% · 53.7th percentile

Risk Scores

CVSS v3.1
8.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
EPSS Score
0.31%
53.7th percentile

Affected Products

VendorProductVersions
devtron-labsdevtron< 0.7.2
kubernetesdevtron0.7.2
devtrondevtron0
github.comdevtron-labs/devtron0

Timeline

References

Open in Interactive Console →