CVE-2023-46575

9.8 criticalEPSS 1.3%

Critical (9.8) in layer5 meshery. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in github.com/layer5io/meshery 0.6.179.

A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the “order” parameter

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-11-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

layer5:meshery

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-9jjc-grg5-67gj	Go	github.com/layer5io/meshery	<0.6.179	0.6.179

References

https://github.com/meshery/meshery/commit/ffe00967acfe4444a5db08ff3a4cafb9adf6013f
https://github.com/meshery/meshery/compare/v0.6.178...v0.6.179
https://github.com/meshery/meshery/pull/9372
https://meshery.io
https://github.com/meshery/meshery/commit/ffe00967acfe4444a5db08ff3a4cafb9adf6013f

Check your stack JSON