GHSA-hvw5-3mgw-7rcf
Debezium database connector has a script injection vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | io.debezium:debezium-connector-mysql | < 2.3.0.Alpha1 | 2.3.0.Alpha1 |
| Maven | io.debezium:debezium-connector-sqlserver | < 2.3.0.Alpha1 | 2.3.0.Alpha1 |
| Maven | io.debezium:debezium-core | < 2.3.0.Alpha1 | 2.3.0.Alpha1 |
Details
As written in the advisory (Markdown source, shown as plain text).
A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.
References
External links from the advisory. They lead to third-party sites.