PT-2022-20025 · Tidb · Tidb

Published 2022-11-04 · Updated 2022-11-05 · CVE-2022-3023

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TiDB versions prior to 6.4.0 TiDB versions prior to 6.1.3

Description The issue concerns the use of an externally-controlled format string and data source name injection in the TiDB server. Specifically, the database name for generating and inserting data into a database does not properly sanitize user input, which can lead to arbitrary file reads.

Recommendations For versions prior to 6.4.0, update to version 6.4.0 or later. For versions prior to 6.1.3, update to version 6.1.3 or later.

Exploit

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2022-3023

GHSA-7FXJ-FR3V-R9GJ

Affected Products

Tidb

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3023.json · Exploit
• https://github.com/pingcap/tidb/commit/d0376379d615cc8f263a0b17c031ce403c8dcbfb · Patch
• https://osv.dev/vulnerability/GHSA-7fxj-fr3v-r9gj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3023 · Security Note
• https://osv.dev/vulnerability/CVE-2022-3023 · Vendor Advisory
• https://github.com/pingcap/tidb · Note
• https://t.me/cibsecurity/52557 · Telegram Post
• https://huntr.dev/bounties/120f1346-e958-49d0-b66c-0f889a469540 · Note
• https://advisory.dw1.io/45 · Note