apache/skywalking

apache/skywalking

skywalking.apache.org

Releases69

Frequency1 month 3 weeks

Last Release 2 months ago

Stars24.8K

APM, Application Performance Monitoring System

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-13921 ↗	Aug 5, 2020Wednesday, 5 August 2020, 14:15	9.8 CRITICAL	7.5 HIGH
Resolved Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
CVE-2020-9483 ↗	Jun 30, 2020Tuesday, 30 June 2020, 15:15	7.5 HIGH	5 MEDIUM
Resolved When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is a SQL injection vulnerability, which allows to access unpexcted data. Apache SkyWalking 6.0.0 to 6.6.0, 7.0.0 H2/MySQL/TiDB storage implementations don't use the appropriate way to set SQL parameters.