Threats tagged 'ghsa-vq4h-g7mx-jcq2'

Keep versions 0.34.10 through 0.55.0 contain a blind SQL injection vulnerability in the CEL-to-SQL converter. This flaw allows authenticated users with read:alert permission to craft CEL expressions that exploit unescaped bracket-indexed JSON keys in JSON path expressions for SQLite, PostgreSQL, and MySQL. Exploitation can lead to unauthorized extraction of other tenants' alerts and password hashes by using result counts as a boolean oracle.