CVE-2023-1419
Fixed upstream EPSS <1%CVSS 5.9
A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.
Products: Red Hat build of Debezium, Red Hat Integration Change Data Capture
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | io.debezium:debezium-connector-mysql | 2.3.0.Alpha1 |
| Maven | io.debezium:debezium-connector-sqlserver | 2.3.0.Alpha1 |
| Maven | io.debezium:debezium-core | 2.3.0.Alpha1 |