Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2020-9483 — SQL Injection in Apache Skywalking

CWE-89 — SQL Injection4 documents4 sources
Severity
7.5HIGHNVD
EPSS
94.1%
top 0.09%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Apache SkywalkingApache Software Foundation Apache Skywalking
Timeline
PublishedJun 30
Latest updateMay 24

Description

**Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is a SQL injection vulnerability, which allows to access unpexcted data. Apache SkyWalking 6.0.0 to 6.6.0, 7.0.0 H2/MySQL/TiDB storage implementations don't use the appropriate way to set SQL parameters.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDapache/skywalking6.0.0 — 6.6.0+1
▶CVEListV5apache_software_foundation/apache_skywalkingApache SkyWalking 6.0.0 to 6.6.0, 7.0.0

🔴Vulnerability Details

2
GHSA
GHSA-p9p3-c9pg-xjrh: **Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is a SQL injection vulnerability,↗2022-05-24
▶
CVEList
CVE-2020-9483: **Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is a SQL injection vulnerability,↗2020-06-30
▶

💥Exploits & PoCs

1
Nuclei
SkyWalking SQLI
▶
CVE-2020-9483 — SQL Injection in Apache Skywalking | cvebase