{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2026-33643", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-03-30T19:32:16.909Z", "dateReserved": "2026-03-23T00:00:00.000Z", "datePublished": "2026-03-30T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-30T15:56:38.752Z"}, "descriptions": [{"lang": "en", "value": "SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/column.go."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://gist.github.com/b0b0haha/fb59199fb1fdf9414e76442e0599bfed"}, {"url": "https://github.com/b0b0haha/SchemaHero--Sqlinjection/blob/main/README.md"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-89", "lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-03-30T19:31:39.624573Z", "id": "CVE-2026-33643", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-30T19:32:16.909Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-33643", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-30T19:31:39.624573Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-30T19:25:45.863Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://gist.github.com/b0b0haha/fb59199fb1fdf9414e76442e0599bfed"}, {"url": "https://github.com/b0b0haha/SchemaHero--Sqlinjection/blob/main/README.md"}], "descriptions": [{"lang": "en", "value": "SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/column.go."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-30T15:56:38.752Z"}}}, "cveMetadata": {"cveId": "CVE-2026-33643", "state": "PUBLISHED", "dateUpdated": "2026-03-30T19:32:16.909Z", "dateReserved": "2026-03-23T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-03-30T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:schemahero:schemahero:*:*:*:*:*:*:*:*", "matchCriteriaId": "66D6AE8B-3D4C-4AB1-9176-EA0DEF149589", "versionEndIncluding": "0.23.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/column.go."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n SQL en SchemaHero 0.23.0 a trav\u00e9s del par\u00e1metro column a la funci\u00f3n mysqlColumnAsInsert en el archivo plugins/mysql/lib/column.go."}], "id": "CVE-2026-33643", "lastModified": "2026-04-02T20:00:48.393", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 3.7, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2026-03-30T16:16:06.880", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Mitigation", "Third Party Advisory"], "url": "https://gist.github.com/b0b0haha/fb59199fb1fdf9414e76442e0599bfed"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Mitigation", "Third Party Advisory"], "url": "https://github.com/b0b0haha/SchemaHero--Sqlinjection/blob/main/README.md"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-03-30T17:24:04.418164+00:00", "value": {"mitigation_remediation": ["Upgrade SchemaHero to the latest available version that contains a fix for the mysqlColumnAsInsert function.", "If an upgrade is not immediately possible, ensure that the column parameter is strictly validated or sanitized before use to prevent injection.", "Restrict network access to the component that processes the column parameter to reduce exposure.", "Monitor database activity for unexpected queries or privileges changes."], "summary": {"action": "Apply Patch", "impact": "Database Compromise via SQL Injection"}, "threat_synthesis": {"affected_systems": "The flaw exists in SchemaHero 0.23.0, a tool for managing database schemas in Kubernetes. No other versions are listed as affected, and no specific vendor names are provided; however, all installations of this exact release that expose the column parameter to untrusted input are vulnerable.", "description_and_impact": "The vulnerability allows an attacker to inject arbitrary SQL through the column parameter used by the mysqlColumnAsInsert function in SchemaHero version 0.23.0. By supplying malicious input, an attacker can manipulate database commands, potentially reading, modifying, or deleting data stored in the target MySQL instance. This flaw directly compromises the confidentiality and integrity of data managed by the affected deployment.", "risk_and_exploitability": "The CVSS score is not supplied in the available data, and EPSS data is missing, so the precise likelihood of exploitation remains uncertain. The issue is not included in CISA's KEV catalog, which suggests it has not yet been widely exploited. The attack vector is inferred to be from any component that accepts user\u2011supplied column names, such as API endpoints or configuration files. Because the vulnerability resides in application logic, it can be exploited remotely by an attacker who can send crafted requests to the component."}}}}, "created": "2026-03-30T20:56:20.449033+00:00", "title": "SQL Injection in SchemaHero via mysqlColumnAsInsert Function", "updated": "2026-03-30T20:56:20.449058+00:00", "vendors": [], "weaknesses": ["CWE-89"]}