| Package | Affected versions | Patched versions |
|---|---|---|
| automate | ≥ 20180319150121, ≤ 20220329091442< 4.13.295 | 4.13.295 |
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free