Lucene search

K
osvGoogleOSV:GHSA-FVQ6-55GV-JX9F
HistorySep 01, 2020 - 3:21 p.m.

SQL Injection in mysql

2020-09-0115:21:05
Google
osv.dev
10

0.003 Low

EPSS

Percentile

65.9%

Versions of mysql prior to 2.0.0-alpha8 are affected by a SQL Injection vulnerability in the mysql.escape() function, which does not properly escape object keys.

Recommendation

Update to version 2.0.0-alpha8 or later.

CPENameOperatorVersion
mysqllt2.0.0-alpha8

0.003 Low

EPSS

Percentile

65.9%