--- title: "CX-2021-4798" date: "2021-06-22T07:00:00+00:00" url: "https://checkmarx.com/zero/vulnerabilities/cx-2021-4798/" --- # CX-2021-4798 [Disclosed vulnerabilities](https://checkmarx.com/zero/vulnerabilities/) CVE-2021-34826 **Published:** Jun 22, 2021 9.8 Critical Severity Conductor Tecnologia SA Heimdall SQL Injection DT Dor Tumarkin Reported by Checkmarx Zero Details Overview ## Summary The Heimdall Gateway application is vulnerable to SQL Injection in its API routing mechanism, allowing unauthenticated attackers to inject SQL statements via the API’s URL when downgrading the HTTP protocol. ## Product - getheimdall/heimdall <= 2.17.0 ## Impact An attacker will be able to tamper SQL syntax, allowing them to compromise all data in the Postgres database, as well as execute SQL code. ## Steps to reproduce 1. Get an instance of Heimdall running as per documentation, or via docker-compose 2. Add any API to the orchestrator; this is part of basic Heimdall functionality 3. Locate an API endpoint on the Heimdall Gateway – for example, the following samples will assume “user” is an endpoint orchestrated by Heimdall 4. Note that for the exploit to work, HTTP/1.0 must be used with HTTP/1.1, with an empty host header 5. Use the following command to induce sleep and demonstrate a SQL command is executed: curl -v -i –http1.0 -H ‘Host:’ “[http://heimdall\_instance/v2/user/’;SELECT(pg\_sleep(10));–a](http://heimdall_instance/v2/user/';SELECT(pg_sleep(10));--a)“ ## Remediation - This software is obsolete and no longer maintained; it should be retired. ## Credit This issue was discovered and reported by Checkmarx Security Research Team Leader [Dor Tumarkin (@dortumarkin)](https://twitter.com/DorTumarkin). ## Resources 1. [Heimdall Git - archived](https://github.com/getheimdall/heimdall) 0 Critical Severity CVSS v3.1 Score 9.8 CVSS v3.1 Vectors- Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High Advisory Timeline1. Discovered Jan 17, 2021 2. Disclosed Jan 21, 2021 Notified Conductor Tecnologia CSIRT 3. Jun 14, 2021 Project Archived by Maintainer — No fix for vulnerability is forthcoming 4. Published Jun 18, 2021 ## Explore more findings [27 Nov 2025 CVE-2025-34281 Stored Cross-Site Scripting (XSS) in ThingsBoard 6.2 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-34281/) [17 Jan 2025 CVE-2025-0825 HTTP Response Splitting in cpp-httplib 6.9 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-0825/) [17 Jun 2025 CVE-2025-6050 Stored Cross-Site Scripting (XSS) in Mezzanine CMS Admin Interface 4.8 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-6050/) [12 Dec 2024 CVE-2024-8374 Code Injection in UltiMaker Cura 7.8 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-8374/) [14 Nov 2024 CVE-2024-52526 Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Tab 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-52526/) [14 Nov 2024 CVE-2024-51497 Stored Cross-site Scripting in @LibreNMS/LibreNMS Custom OID Tab 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51497/) [14 Nov 2024 CVE-2024-51496 Reflected Cross-site Scripting in @LibreNMS/LibreNMS /wireless and /health endpoints 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51496/) [ 14 Nov 2024 CVE-2024-51495 Stored Cross-site Scripting in @LibreNMS/LibreNMS Device Overview `overwrite\_ip` Field 7.5 Visit the page ](https://checkmarx.com/zero/vulnerabilities/cve-2024-51495/) [14 Nov 2024 CVE-2024-51494 Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51494/) [14 Nov 2024 CVE-2024-50352 Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Section of Device Overview 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50352/) [14 Nov 2024 CVE-2024-50351 Reflected Cross-site Scripting in @LibreNMS/LibreNMS Logs Tab 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50351/) [14 Nov 2024 CVE-2024-50350 Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings Port Group 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50350/)