Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE: 2022-21363 found in mysql-connector-java - Version: 5.1.48 [JAVA] #237

Open
bnreplah opened this issue May 4, 2023 · 0 comments
Open
Labels
Severity: High High severity Veracode Dependency Scanning A Veracode identified vulnerability

Comments

@bnreplah
Copy link
Owner

bnreplah commented May 4, 2023

Veracode Software Composition Analysis

Attribute Details
Library mysql-connector-java
Description MySQL java connector
Language JAVA
Vulnerability Privilege Escalation
Vulnerability description mysql-connector is vulnerable to privilege escalation. An attacker can exploit the vulnerability and takeover the MySQL Connectors.
CVE 2022-21363
CVSS score 6
Vulnerability present in version/s 5.1.29-8.0.27
Found library version/s 5.1.48
Vulnerability fixed in version 8.0.28
Library latest version 8.0.33
Fix

Links:

@bnreplah bnreplah added Severity: High High severity Veracode Dependency Scanning A Veracode identified vulnerability labels May 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Severity: High High severity Veracode Dependency Scanning A Veracode identified vulnerability
Projects
None yet
Development

No branches or pull requests

1 participant