6.8
Medium
CVE-2024-49588 Multiple endpoints in `oracle-sidecar` in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections
Description
Multiple endpoints in `oracle-sidecar` in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| com.palantir.srx.prometheus.sls-oracle-sidecar:sls-oracle-sidecar 0.544 | earliest → < 0.544.0 | 0.544.0 |
| com.palantir.srx.prometheus.sls-oracle-sidecar:sls-oracle-sidecar 0.347 | 0.347.0 → latest | No fix stated |
| oracle-sidecar 0.347 | 0.347.0 → < 0.544.0 | 0.544.0 |