GHSA-m6vm-37g8-gqvh

Source

https://github.com/advisories/GHSA-m6vm-37g8-gqvh

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/10/GHSA-m6vm-37g8-gqvh/GHSA-m6vm-37g8-gqvh.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-m6vm-37g8-gqvh

Aliases

CVE-2023-22102

Published

2023-10-18T00:31:42Z

Modified

2024-12-05T17:02:29.551280Z

Severity

8.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
8.9 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSS Calculator

Summary

MySQL Connectors takeover vulnerability

Details

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Connectors.

Database specific

{
    "nvd_published_at": "2023-10-17T22:15:15Z",
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": true,
    "github_reviewed_at": "2024-08-29T18:32:05Z"
}

References

Affected packages

Maven / com.mysql:mysql-connector-j

Package

Name: com.mysql:mysql-connector-j; View open source insights on deps.dev
Purl: pkg:maven/com.mysql/mysql-connector-j

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.2.0

Affected versions

8.*

8.0.31

8.0.32

8.0.33

8.1.0

Maven / mysql:mysql-connector-java

Package

Name: mysql:mysql-connector-java; View open source insights on deps.dev
Purl: pkg:maven/mysql/mysql-connector-java

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

8.0.33

Affected versions

2.*

2.0.14

3.*

3.0.8

3.0.10

3.1.11

3.1.12

3.1.13

3.1.14

5.*

5.0.2

5.0.3

5.0.4

5.0.5

5.0.7

5.0.8

5.1.1

5.1.2

5.1.3

5.1.4

5.1.5

5.1.6

5.1.8

5.1.9

5.1.10

5.1.11

5.1.12

5.1.13

5.1.14

5.1.15

5.1.16

5.1.17

5.1.18

5.1.19

5.1.20

5.1.21

5.1.22

5.1.23

5.1.24

5.1.25

5.1.26

5.1.27

5.1.28

5.1.29

5.1.30

5.1.31

5.1.32

5.1.33

5.1.34

5.1.35

5.1.36

5.1.37

5.1.38

5.1.39

5.1.40

5.1.41

5.1.42

5.1.43

5.1.44

5.1.45

5.1.46

5.1.47

5.1.48

5.1.49

6.*

6.0.2

6.0.3

6.0.4

6.0.5

6.0.6

8.*

8.0.7-dmr

8.0.8-dmr

8.0.9-rc

8.0.11

8.0.12

8.0.13

8.0.14

8.0.15

8.0.16

8.0.17

8.0.18

8.0.19

8.0.20

8.0.21

8.0.22

8.0.23

8.0.24

8.0.25

8.0.26

8.0.27

8.0.28

8.0.29

8.0.30

8.0.31

8.0.32

8.0.33