CVSS 3.1
5.9 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2023-1419
Medium (5.9). EPSS 0.4% chance of exploitation in the next 30 days. Fixed in io.debezium:debezium-connector-mysql 2.3.0.Alpha1.
A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
- CWE
- CWE-233
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-hvw5-3mgw-7rcf | Maven | io.debezium:debezium-connector-mysql | <2.3.0.Alpha1 | 2.3.0.Alpha1 |
| GHSA-hvw5-3mgw-7rcf | Maven | io.debezium:debezium-connector-sqlserver | <2.3.0.Alpha1 | 2.3.0.Alpha1 |
| GHSA-hvw5-3mgw-7rcf | Maven | io.debezium:debezium-core | <2.3.0.Alpha1 | 2.3.0.Alpha1 |