Not rated

CVE-2023-49198 Mysql security vulnerability in Apache SeaTunnel

Description

Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360 This issue affects Apache SeaTunnel: 1.0.0. Users are recommended to upgrade to version [1.0.1], which fixes the issue.

Affected products and versions

Product	Affected versions	Fixed in
Apache SeaTunnel Web	1.0.0	No fix stated
apache_seatunnel_web	1.0.0	No fix stated

References

lists.apache.org lists.apache.org

Timeline

Published August 21, 2024
Last modified August 23, 2024

The 2 CVEs of Apache SeaTunnel Web →

CVE-2023-48396 Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can… Not rated

Track this CVE

CVE-2023-49198 Mysql security vulnerability in Apache SeaTunnel

Description

Affected products and versions

References

Timeline

Other CVEs of Apache SeaTunnel Web