← Back to CVE List

CVE-2019-3792

Published: 2019-04-01T21:30Z
Last Modified: 2024-11-21T04:42Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt