CVE-2019-3792 — Concourse 5.0.0 SQL Injection vulnerability
Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload…
Published: 2019-04-01 · CVSS: 6.8 · CVSS 3.0
Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7