Skip to content
Sign in
8.3 High

CVE-2024-45794 devtron is an open source tool integration platform for Kubernetes

Description

devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with minimum permission) could utilize and exploit SQL Injection to allow the execution of malicious SQL queries via CreateUser API (/orchestrator/user). This issue has been addressed in version 0.7.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products and versions

Product Affected versions Fixed in
devtron 0.7 earliest → < 0.7.2 0.7.2
devtron 0.7.2 No fix stated

Other CVEs of devtron

The 3 CVEs of devtron →
CVE-2026-82882 Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint,… 8.7 High CVE-2026-25538 Devtron is an open source tool integration platform for Kubernetes 8.7 High
Track this CVE