CVE-2021-3779CWE-610

Ruby-MySQL Gem Client File Read

published June 28, 2022

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01192 · 67.8th percentile
Weakness
CWE-610 · Externally Controlled Reference to a Resource in Another Sphere
Published
2022-06-28T16:30Z
EPSS history
Timeline
  • 28 JUN 16:30Z
    Ruby-MySQL Gem Client File Read
    cvelistv5