PT-2020-12050 · Mysql Server · Rmysql

Nikolay Simakov · Published 2020-03-17 · Updated 2020-03-19 · CVE-2020-10380

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RMySQL versions 0.10.19 and earlier

Description The issue allows SQL Injection. This means an attacker could potentially inject malicious SQL code, affecting the database.

Recommendations For versions 0.10.19 and earlier, update to a version later than 0.10.19 to resolve the issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-10380

Affected Products

Rmysql

References · 9

• https://ubuntu.com/security/CVE-2020-10380 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10380 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10380 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-10380 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-10380 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-10380 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-10380 · Vendor Advisory
• https://github.com/r-dbi/RMySQL/blob/master/NEWS.md · Note
• https://t.me/cvenotify/1811 · Telegram Post