CVE-2022-30331

The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation

published September 5, 2022

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequently, an attacker can execute arbitrary C++ code. NOTE: the vendor's position is "GSQL was behaving as expected."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01207 · 67.9th percentile
Published
2022-09-05T00:00Z
EPSS history
Timeline
  • 05 SEP 00:00Z
    The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation
    cvelistv5