Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Smoking

#25683of 53,622
9.8Total CVSS
Vulnerabilities · 1
PT-2022-27475
9.8
2022-12-22
Apache · Apache Shardingsphere-Proxy · CVE-2022-45347
**Name of the Vulnerable Software and Affected Versions** Apache ShardingSphere-Proxy versions prior to 5.3.0 **Description** The issue arises when Apache ShardingSphere-Proxy is used with MySQL as the database backend. In versions prior to 5.3.0, the database session is not properly cleaned up after a client authentication failure. This allows an attacker to execute normal commands by constructing a special MySQL client. **Recommendations** For versions prior to 5.3.0, update to Apache ShardingSphere 5.3.0 to resolve the issue. As a temporary workaround, consider restricting access to the MySQL database backend to minimize the risk of exploitation.