EUVD-2023-2051

Malicious code in bioql PyPI...

CVE-2023-39021

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

Code Injection

wix-embedded-mysql is vulnerable to Code Injection. The vulnerability exists because the apply function of Setup.java as does not properly check if the argument is a Mysql executable, allowing an attacker to inject and execute malicious code...

com.wix:wix-embedded-mysql-download-and-extract (2.2.10) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.2.10)

com.wix:wix-embedded-mysql MAVEN version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 2.2.10 Source cves: CVE-2023-39021 Source advisory:...

GHSA-FX3V-4W3W-WPWR Code injection in wix-embedded-mysql

wix-embedded-mysql v4.6.2 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

com.github.michaelruocco.embedded-mysql-plugin:com.github.michaelruocco.embedded-mysql-plugin.gradle.plugin (2.1.5), com.github.michaelruocco:com.github.michaelruocco.gradle.plugin (2.1.5) +3 more potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.1.2)

com.wix:wix-embedded-mysql MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco.embedded-mysql-plugin:com.github.michaelruocco.embedded-mysql-plugin.gradle.plugin...

com.github.atool:generator (>=1.3.17, <=1.4.0), com.github.charlemaznable:embedded-mysql-extension (>=0.0.3, <=2022.0.2) +18 more potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (>=4.0.0, <=4.6.2)

com.wix:wix-embedded-mysql MAVEN version =4.0.0, =1.3.17, =0.0.3, =2.1.7, =2.1.7, =4.0.0, =2.1.7, =springboot1.0.0.1, =0.0.1-alpha, =1.7.0, =1.4.0, =0.1.1, =0.1.1, =1.1.0, =1.1.4 and more Source cves: CVE-2023-39021 Source advisory: OSV:GHSA-FX3V-4W3W-WPWR...

com.github.michaelruocco:embedded-mysql-plugin (2.0.0) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (1.0.3)

com.wix:wix-embedded-mysql MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.0.0 Source cves: CVE-2023-39021 Source advisory:...

com.wix:wix-embedded-mysql-download-and-extract (2.2.9) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.2.9)

com.wix:wix-embedded-mysql MAVEN version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 2.2.9 Source cves: CVE-2023-39021 Source advisory:...

com.github.michaelruocco:embedded-mysql-plugin (2.1.6), com.wix:wix-embedded-mysql-download-and-extract (3.0.0) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (3.0.0)

com.wix:wix-embedded-mysql MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.1.6 - com.wix:wix-embedded-mysql-download-and-extract 3.0....

com.wix:wix-embedded-mysql-download-and-extract (3.1.1) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (3.1.1)

com.wix:wix-embedded-mysql MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 3.1.1 Source cves: CVE-2023-39021 Source advisory:...

com.github.atool:generator (>=1.3.17, <=1.4.0), com.github.charlemaznable:embedded-mysql-extension (>=0.0.3, <=2022.0.2) +18 more potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (>=4.0.0, <=4.6.2)

com.wix:wix-embedded-mysql MAVEN version =4.0.0, =1.3.17, =0.0.3, =2.1.7, =2.1.7, =4.0.0, =2.1.7, =springboot1.0.0.1, =0.0.1-alpha, =1.7.0, =1.4.0, =0.1.1, =0.1.1, =1.1.0, =1.1.4 and more Source cves: CVE-2023-39021 Source advisory: GHSA-FX3V-4W3W-WPWR...

com.github.michaelruocco:embedded-mysql-plugin (>=2.0.1, <=2.0.2) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.0.0)

com.wix:wix-embedded-mysql MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin =2.0.1, =2.0.2 Source cves: CVE-2023-39021 Source advisory:...

com.github.michaelruocco:embedded-mysql-plugin (2.1.3) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.0.3)

com.wix:wix-embedded-mysql MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.1.3 Source cves: CVE-2023-39021 Source advisory:...

com.github.michaelruocco:embedded-mysql-plugin (2.1.2) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.0.1)

com.wix:wix-embedded-mysql MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.1.2 Source cves: CVE-2023-39021 Source advisory:...

Code injection in wix-embedded-mysql

wix-embedded-mysql v4.6.2 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

com.github.michaelruocco.mysql:embedded-mysql-plugin (>=0.1.0, <=0.4.0), com.github.michaelruocco:embedded-mysql-plugin (1.0.0) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (1.0.2)

com.wix:wix-embedded-mysql MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco.mysql:embedded-mysql-plugin =0.1.0, =0.4.0 -...

com.wix:wix-embedded-mysql-download-and-extract (3.0.2) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (3.0.2)

com.wix:wix-embedded-mysql MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 3.0.2 Source cves: CVE-2023-39021 Source advisory:...

com.wix:wix-embedded-mysql-download-and-extract (3.1.0) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (3.1.0)

com.wix:wix-embedded-mysql MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 3.1.0 Source cves: CVE-2023-39021 Source advisory:...

com.wix:wix-embedded-mysql-download-and-extract (3.0.1) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (3.0.1)

com.wix:wix-embedded-mysql MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 3.0.1 Source cves: CVE-2023-39021 Source advisory:...