SeaweedFS Vulnerable to SQL Injection

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-40120 · ADVISORY
• seaweedfs/seaweedfs · WEB
• seaweedfs/seaweedfs commit 9ac1023 · WEB
• gist.github.com/sud0why/1b2115c1d644bd3db1c1b3f16684a78c · WEB
• seaweedfs/seaweedfs · PACKAGE
• seaweedfs/seaweedfs release 3.69 · WEB
• GitHub Advisory GHSA-q97m-8853-pq76 · ADVISORY

github.com/seaweedfs/seaweedfs のその他の脆弱性

• CVE-2026-73080緊急 9.3SeaweedFS is a distributed storage system. Prior to 4.24, VolumeServer.FetchAndWriteNeedle in weed/server/volume_grpc_remote.go fetches a ca…
• CVE-2026-72921高 8.1SeaweedFS is a distributed storage system. Prior to 4.24, the weed/server/filer_server_handlers.go allowed_prefixes authorization check used…
• CVE-2026-72920緊急 9.8SeaweedFS is a distributed storage system. Prior to 4.24, the filer registers the SeaweedIdentityAccessManagement gRPC service without manda…
• CVE-2026-55874高 7.7SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source …
• CVE-2026-55873中 4.3SeaweedFS is a distributed storage system. In versions 4.08 through 4.33, requests signed with SigV4 service s3tables are routed to the S3Ta…