-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
GoGoMiggo AIRoot Cause AnalysisThe vulnerability stems from improper input validation when creating shards via VTAdmin. The commit diff shows the patch added a check for '/' in ValidateShardName (go/vt/topo/shard.go). Since vtctldclient properly validated inputs and VTAdmin did not, the unpatched version of ValidateShardName was the root cause. The function's failure to sanitize '/' characters directly enabled the creation of malformed shard names, leading to topology corruption.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| vitess.io/vitess | go | < 0.16.2 | 0.16.2 |