Code injection in wix-embedded-mysql

wix-embedded-mysql v4.6.2 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

com.wix:wix-embedded-mysql-download-and-extract (3.1.0) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (3.1.0)

com.wix:wix-embedded-mysql MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 3.1.0 Source cves: CVE-2023-39021 Source advisory:...

com.github.atool:generator (>=1.3.17, <=1.4.0), com.github.charlemaznable:embedded-mysql-extension (>=0.0.3, <=2022.0.2) +18 more potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (>=4.0.0, <=4.6.2)

com.wix:wix-embedded-mysql MAVEN version =4.0.0, =1.3.17, =0.0.3, =2.1.7, =2.1.7, =4.0.0, =2.1.7, =springboot1.0.0.1, =0.0.1-alpha, =1.7.0, =1.4.0, =0.1.1, =0.1.1, =1.1.0, =1.1.4 and more Source cves: CVE-2023-39021 Source advisory: OSV:GHSA-FX3V-4W3W-WPWR...

com.github.michaelruocco.embedded-mysql-plugin:com.github.michaelruocco.embedded-mysql-plugin.gradle.plugin (2.1.5), com.github.michaelruocco:com.github.michaelruocco.gradle.plugin (2.1.5) +3 more potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.1.2)

com.wix:wix-embedded-mysql MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco.embedded-mysql-plugin:com.github.michaelruocco.embedded-mysql-plugin.gradle.plugin...

com.wix:wix-embedded-mysql-download-and-extract (2.2.10) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.2.10)

com.wix:wix-embedded-mysql MAVEN version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 2.2.10 Source cves: CVE-2023-39021 Source advisory:...

com.github.michaelruocco:embedded-mysql-plugin (2.1.3) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.0.3)

com.wix:wix-embedded-mysql MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.1.3 Source cves: CVE-2023-39021 Source advisory:...

com.wix:wix-embedded-mysql-download-and-extract (3.0.1) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (3.0.1)

com.wix:wix-embedded-mysql MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 3.0.1 Source cves: CVE-2023-39021 Source advisory:...

CVE-2023-39021

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39021

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

Code injection

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39021

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39021: Improper Control of Generation of Code

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39021

CVE-2023-39021 applies to wix-embedded-mysql v4.6.1 and below . The vulnerability exists in the com.wix.mysql.distribution.Setup.apply function, caused by passing an unchecked argument, leading to a code injection condition. Public sources describe the impact as a high-severity, in-the-wild risk ...

CVE-2023-39021

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

PT-2023-26742

Name of the Vulnerable Software and Affected Versions wix-embedded-mysql versions 4.6.1 and below wix-embedded-mysql versions 4.6.2 and below Since both versions are essentially the same in terms of vulnerability, we can consolidate them into a single line for clarity: wix-embedded-mysql versions...

CVE-2023-39021

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

Wix Embedded MySQL code injection vulnerability

Wix Embedded MySql is a Wix Incubator open source based embedded mysql. A security vulnerability exists in Wix Embedded MySql v4.6.1 and earlier versions, which stems from a code injection vulnerability in the component com.wix.mysql.distribution.setup.apply...

CVE-2023-39021

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

Security Bulletin: Multiple vulnerabilities affect embedded Content Management Interoperability Service in IBM Business Automation Workflow - CVE-2023-20861, CVE-2023-20863

Summary Embedded Content Management Interoperability Service in IBM Business Automation Workflow is affected by multiple Spring framework vulnerabilities Vulnerability Details CVEID:CVE-2023-20863 DESCRIPTION: VMware Tanzu Spring Framework is vulnerable to a denial of service, caused by improper...

SUSE: Security Advisory (SUSE-SU-2023:2990-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...