Cpe:2.3:a:magistrala:magistrala:*:*:*:*:*:*:*:*

Magistrala through version 1.0.0 contains an authorization bypass flaw allowing authenticated workspace members to perform unauthorized certificate operations across different tenants.

Magistrala versions prior to 1.0.0 contain a SQL injection vulnerability in the timescale-reader and postgres-reader services allowing authenticated users to achieve remote code execution via arbitrary SQL execution.