Skip to main content

Improper Handling of Parameters

CVE-2023-1419

Medium
5.9/10

Summary

A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data. This issue affects io.debezium:debezium-connector-mysql versions prior to 2.3.0.Alpha1.

  • HIGH
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • NONE

CWE-233 - Improper Handling of Parameters

The software does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.

References

Advisory Timeline

  • Published