CVE-2020-13921 Explained : Impact and Mitigation

Apache SkyWalking 6.5.0, 6.6.0, 7.0.0, 8.0.0, 8.0.1 are affected by a SQL injection vulnerability when using H2/MySQL/TiDB as storage.

Understanding CVE-2020-13921

Apache SkyWalking is susceptible to SQL injection when specific storage options are activated.

What is CVE-2020-13921?

CVE-2020-13921 is a SQL injection vulnerability in Apache SkyWalking versions 6.5.0 to 8.0.1 when utilizing H2/MySQL/TiDB for storage.

The Impact of CVE-2020-13921

The vulnerability allows attackers to execute malicious SQL queries, potentially leading to data manipulation or unauthorized access.

Technical Details of CVE-2020-13921

Apache SkyWalking's SQL injection vulnerability in wildcard query cases.

Vulnerability Description

The issue arises only when using H2/MySQL/TiDB as storage, enabling SQL injection in wildcard query scenarios.

Affected Systems and Versions

Apache SkyWalking versions 6.5.0, 6.6.0, 7.0.0, 8.0.0, 8.0.1

Exploitation Mechanism

Attackers can exploit the vulnerability by injecting malicious SQL queries through wildcard queries.

Mitigation and Prevention

Immediate action and long-term security practices to address CVE-2020-13921.

Immediate Steps to Take

Update Apache SkyWalking to a patched version that addresses the SQL injection vulnerability.
Avoid using H2/MySQL/TiDB as storage until the issue is resolved.

Long-Term Security Practices

Regularly monitor and audit SQL queries for any suspicious activities.
Implement input validation and parameterized queries to prevent SQL injection attacks.
Stay informed about security updates and patches from Apache SkyWalking.

Patching and Updates

Apply the latest patches and updates provided by Apache SkyWalking to mitigate the SQL injection vulnerability.