CVE-2022-3023

🗓️ 04 Nov 2022 00:00:00Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 52 Views

Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3. NV

Reporter	Title	Published	Views	Family All 17
Huntr	Data Source Name Injection	26 Dec 202113:09	–	huntr
Circl	CVE-2022-3023	4 Nov 202215:28	–	circl
CNNVD	PingCAP TiDB 格式化字符串错误漏洞	4 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-3023 Use of Externally-Controlled Format String in pingcap/tidb	4 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-7269	3 Oct 202520:07	–	euvd
Github Security Blog	TiDB vulnerable to Use of Externally-Controlled Format String	4 Nov 202219:01	–	github
NVD	CVE-2022-3023	4 Nov 202212:15	–	nvd
OSV	CGA-5CR7-VC6R-4RGC	29 Jan 202600:44	–	osv
OSV	CVE-2022-3023 Use of Externally-Controlled Format String in pingcap/tidb	4 Nov 202200:00	–	osv
OSV	GHSA-7FXJ-FR3V-R9GJ TiDB vulnerable to Use of Externally-Controlled Format String	4 Nov 202219:01	–	osv

NVD

Node

pingcap tidbRange<6.4.0

pingcap tidbRange6.1.0–6.1.3

[
  {
    "vendor": "pingcap",
    "product": "pingcap/tidb",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "6.4.0, 6.1.3",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]