CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2024/08/21 10:15 a.m.•31 views

CVE-2023-49198

Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360 This issue affects Apache SeaTunnel: 1.0.0. Users...

7.5CVSS0.00934EPSS

Exploits0References2

Vulnrichment•added 2024/08/21 9:37 a.m.•18 views

CVE-2023-49198 Apache SeaTunnel Web: Arbitrary file read vulnerability

6.6AI score0.00934EPSS

Exploits0References1

CVE•added 2024/08/21 9:37 a.m.•55 views

CVE-2023-49198

CVE-2023-49198 : Arbitrary file read in Apache SeaTunnel Web due to MySQL URL parameters (allowLoadLocalInfile, allowUrlInLocalInfile, allowLoadLocalInfileInPath, maxAllowedPacket). Affected: SeaTunnel 1.0.0; fix: upgrade to 1.0.1. Multiple connected sources corroborate the issue and remediation;...

7.5CVSS6.2AI score0.00934EPSS

Exploits0References2Affected Software1