Oracle · Mysql Server · CVE-2022-21459
**Name of the Vulnerable Software and Affected Versions**
MySQL Server versions 8.0.28 and prior
**Description**
The issue is related to insufficient input validation in the Server: Optimizer component of the MySQL Server system management database. This can be exploited by a remote attacker to gain unauthorized access to modify, add, or delete data, or to cause a denial of service using the MySQL network protocol. Successful attacks can result in the ability to cause a hang or frequently repeatable crash of MySQL Server, as well as unauthorized update, insert, or delete access to some of MySQL Server's accessible data.
**Recommendations**
For versions 8.0.28 and prior, update to a version that includes the fix for this issue to prevent exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.