GHSA-4c32-w6c7-77x4

SQL injection when using MySQL/PostgreSQL data checking

Source: GitHub Advisory Database (reviewed) High CVE-2023-33967

Packages

Ecosystem	Package	Affected	Fixed in
Go	github.com/megaease/easeprobe	< 2.1.0	2.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

An SQL injection issue was discovered in EaseProbe before 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been fixed in v2.1.0; users should upgrade to this version. The vulnerability was discovered by the [Oxeye research](https://www.oxeye.io/) team.

References

External links from the advisory. They lead to third-party sites.

https://github.com/megaease/easeprobe/security/advisories/GHSA-4c32-w6c7-77x4 web
https://nvd.nist.gov/vuln/detail/CVE-2023-33967 advisory
https://github.com/megaease/easeprobe/pull/330 web
https://github.com/megaease/easeprobe/commit/caaf5860df2aaa76acd29bc40ec9a578d0b1d6e1 web
https://github.com/megaease/easeprobe package
https://github.com/megaease/easeprobe/releases/tag/v2.1.0 web