{"schema_version":"1.9.0","id":"BIT-seaweedfs-2024-40120","published":"2025-06-18T15:00:48.818Z","modified":"2026-09-08T08:48:19.380502681Z","aliases":["CVE-2024-40120","GHSA-q97m-8853-pq76","GO-2025-3690"],"details":"seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.","affected":[{"package":{"name":"seaweedfs","ecosystem":"Bitnami","purl":"pkg:bitnami/seaweedfs"},"ranges":[{"type":"SEMVER","events":[{"introduced":"3.68.0"},{"fixed":"3.69.0"}]}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/seaweedfs/BIT-seaweedfs-2024-40120.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}]}],"references":[{"type":"EVIDENCE","url":"https://gist.github.com/sud0why/1b2115c1d644bd3db1c1b3f16684a78c"},{"type":"EVIDENCE","url":"https://github.com/seaweedfs/seaweedfs/issues/5710"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40120"}],"database_specific":{"cpes":["cpe:2.3:a:seaweedfs:seaweedfs:*:*:*:*:*:*:*:*"],"severity":"Medium"}}