CVE-2020-1790

Name of the Vulnerable Software and Affected Versions GaussDB 200 version 6.5.1

Description The issue arises from the software's construction of commands using external input from users without sufficient validation of the input. This allows an attacker to potentially inject certain commands.

Recommendations For GaussDB 200 version 6.5.1, ensure that user input is thoroughly validated to prevent command injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.