EUVD-2024-54681

| CVE-2024-44905 MEDIUM
2025-06-12 [email protected] GHSA-6xp3-p59p-q4fj
6.5
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

5
Patch Released
Mar 31, 2026 - 21:13 nvd
Patch available
Analysis Generated
Mar 14, 2026 - 21:20 vuln.today
EUVD ID Assigned
Mar 14, 2026 - 21:20 euvd
EUVD-2024-54681
PoC Detected
Jul 09, 2025 - 19:14 vuln.today
Public exploit code
CVE Published
Jun 12, 2025 - 16:15 nvd
MEDIUM 6.5

Tags

SQLi Ubuntu Debian Pg Suse

Description

go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/append_value.go.

Analysis

go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/append_value.go.

Technical Context

SQL injection occurs when user-supplied input is incorporated into SQL queries without proper sanitization or parameterized queries.

Affected Products

Affected products: Uptrace Pg 10.13.0

Remediation

Use parameterized queries or prepared statements. Apply input validation and escape special characters. Implement least-privilege database accounts.

Priority Score

53
Low Medium High Critical
KEV: 0
EPSS: +0.1
CVSS: +32
POC: +20

Vendor Status

Ubuntu

Priority: Medium
golang-gopkg-pg.v5
Release Status Version
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
upstream needs-triage -
oracular ignored end of life, was needs-triage
questing needs-triage -
plucky ignored end of life, was needs-triage

Debian

Bug #1111939
golang-gopkg-pg.v5
Release Status Fixed Version Urgency
bookworm, bullseye, trixie vulnerable 5.3.3-3.1 -
(unstable) fixed (unfixed) -

Share

EUVD-2024-54681 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy