CVE-2024-49588

Multiple endpoints in `oracle-sidecar` in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections.

Score

CVSS 3.1 6.8 Medium

Status

Deferred - cve-coordination@palantir.com

Published

2024-11-21

Last modified

2024-11-27

Weaknesses

CWE-89

Affected products

• Oracle-sidecar (Oracle)
• Com.palantir.srx.prometheus.sls-oracle-sidecarsls-oracle-sidecar (Palantir)

References

• https://cwe.mitre.org/data/definitions/89.html
• https://palantir.safebase.us/?tcuUid=b5724367-8b86-436a-8ef2-4480ec41cc2c