CVE-2024-29031

CVE-2024-29031 is a SQL injection vulnerability affecting Meshery versions prior to 0.7.17, an open-source cloud-native manager for Kubernetes. This flaw allows a remote attacker to extract sensitive information by manipulating the 'order' parameter in the GetMeshSyncResources function. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, leading to high confidentiality impact without requiring user interaction. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.