A SQL injection vulnerability in SchemaHero version 0.23.0 allows authenticated attackers to potentially execute arbitrary database queries.

This is a SQL injection flaw located in the mysqlColumnAsInsert function within the plugins/mysql/lib/column.go file. The vulnerability is exploitable by an authenticated user who can manipulate the column parameter to influence backend database operations.

The ability to perform SQL injection poses a significant risk to data integrity and confidentiality. A successful exploit could allow an attacker to read, modify, or delete sensitive data stored within the database, potentially leading to unauthorized access or full database compromise. With a CVSS score of 7.4, this high-severity flaw requires immediate attention to prevent operational disruption and data loss.

Immediate Action: Monitor official SchemaHero channels for the release of a security patch and apply it immediately upon availability.

Proactive Monitoring: Review database access logs for anomalous query patterns, such as unexpected syntax or large data exfiltration attempts, originating from the application service account.

Compensating Controls: Implement strict input validation at the application layer and ensure that the database service user operates with the principle of least privilege to limit the scope of potential unauthorized queries.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the referenced GitHub repository.

Given the high CVSS score and the public availability of a proof-of-concept, this vulnerability should be prioritized for remediation. Security teams must ensure that database interactions are properly sanitized and that the underlying software is updated as soon as the vendor releases a corrective patch.