~ / search / GHSA-8m84-h9hh-3cfh

GHSA-8m84-h9hh-3cfh

Apache SeaTunnel SQL Injection vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-49198

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.seatunnel:seatunnel >= 1.0.0, < 1.0.1 1.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360 This issue affects Apache SeaTunnel: 1.0.0. Users are recommended to upgrade to version [1.0.1], which fixes the issue.

References

External links from the advisory. They lead to third-party sites.