CVE-2022-30331

Published: 2022-09-05T16:15Z

Last Modified: 2024-11-21T07:02Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequently, an attacker can execute arbitrary C++ code. NOTE: the vendor's position is "GSQL was behaving as expected." > MITRE Terms of Use apply – see LICENSE‑MITRE.txt