Vendor
high
advisory
Authorization Bypass Vulnerability in Magistrala
1 TTP 1 CVEMagistrala through version 1.0.0 contains an authorization bypass flaw allowing authenticated workspace members to perform unauthorized certificate operations across different tenants.
Magistrala
1t
1c
high
advisory
SQL Injection in Magistrala HTTP API
2 TTPs 1 CVEMagistrala versions prior to 1.0.0 contain a SQL injection vulnerability in the timescale-reader and postgres-reader services allowing authenticated users to achieve remote code execution via arbitrary SQL execution.
Magistrala
sql-injection
vulnerability
rce
2t
1c