PT-2023-6380

CVE-2023-22102

·

تاريخ النشر

2023-10-17

·

تاريخ التحديث

2026-06-17

الوصف من

CVSS 4.0
8.9
عالية
المقاييسAV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 8.1.0 and prior
Description The issue is related to insufficient input validation in the Connector/J component of MySQL Connectors, allowing an unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products. The vulnerability can result in the takeover of MySQL Connectors.
Recommendations For versions 8.1.0 and prior, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the Connector/J component to minimize the risk of exploitation. Avoid using the Connector/J component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-M6VM-37G8-GQVH
AZL-31573
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾