5.1
Medium
CVE-2025-62228 Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg
Description
Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, we recommend users update Flink CDC version to 3.5.0 which address this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Flink CDC 3.3 | 3.3.0 → 3.4.0 | No fix stated |
References
- lists.apache.org lists.apache.org
Timeline
- Published
- Last modified