Lucene search
+L

2 matches found

OSV
OSV
added 2025/10/09 3:31 p.m.4 views

GHSA-WQM3-W3P6-XJGM Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers

Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...

5.1CVSS8AI score0.00424EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2025/10/09 3:31 p.m.11 views

Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers

Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...

8.8CVSS8AI score0.00424EPSS
SaveExploits0References6Affected Software5
Rows per page
Query Builder