{"schema_version":"1.9.0","id":"CVE-2024-40120","published":"2025-05-16T00:00:00Z","modified":"2026-08-12T03:51:33.186778784Z","aliases":["BIT-seaweedfs-2024-40120","GHSA-q97m-8853-pq76","GO-2025-3690"],"related":["CGA-437m-96hr-h87g","openSUSE-SU-2025:15159-1"],"details":"seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/seaweedfs/seaweedfs","events":[{"introduced":"a9cd9b0542ef9e2c795baf063d3f7db395ff209b"},{"last_affected":"a9cd9b0542ef9e2c795baf063d3f7db395ff209b"}],"database_specific":{"cpe":"cpe:2.3:a:seaweedfs:seaweedfs:3.68:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.68"},{"last_affected":"3.68"}],"source":"CPE_STRING"}}],"versions":["3.68"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-40120.json"}}],"references":[{"type":"WEB","url":"https://gist.github.com/sud0why/1b2115c1d644bd3db1c1b3f16684a78c"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40120.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40120"},{"type":"REPORT","url":"https://github.com/seaweedfs/seaweedfs/issues/5710"}],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40120.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}]}