UBUNTU-CVE-2019-14939

An issue was discovered in the mysql aka mysqljs module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default...

CVE-2019-14939

CVE-2019-14939 affects the mysqljs/mYSQL module for Node.js (version 2.17.1). The issue is that the LOAD DATA LOCAL INFILE option is enabled by default, enabling potential exposure of data via local file loading. The CVSS3 vector indicates LOCAL attack vector, LOW complexity, with LOW privileges ...