Vulnerabilities > Tdengine > Grafana > 3.3.1

DATE CVE VULNERABILITY TITLE RISK
2023-06-06 CVE-2023-34111 Command Injection vulnerability in Tdengine Grafana
The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of `${{ github.event.pull_request.title }}` in a bash command within the GitHub workflow.
network
low complexity
tdengine CWE-77
critical
 9.8
9.8