Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hvw5-3mgw-7rcf

Опубликовано: 17 нояб. 2024
Источник: github
Github: Прошло ревью
CVSS3: 5.9

Описание

Debezium database connector has a script injection vulnerability

A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.

Пакеты

Наименование

io.debezium:debezium-connector-mysql

maven
Затронутые версииВерсия исправления

< 2.3.0.Alpha1

2.3.0.Alpha1

Наименование

io.debezium:debezium-connector-sqlserver

maven
Затронутые версииВерсия исправления

< 2.3.0.Alpha1

2.3.0.Alpha1

Наименование

io.debezium:debezium-core

maven
Затронутые версииВерсия исправления

< 2.3.0.Alpha1

2.3.0.Alpha1

EPSS

Процентиль: 32%
0.00126
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-233

Связанные уязвимости

CVSS3: 5.9
redhat
больше 1 года назад

A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.

CVSS3: 5.9
nvd
около 1 года назад

A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.

EPSS

Процентиль: 32%
0.00126
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-233