medium6.5
CVE-2021-3779
Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql
Impact
A malicious actor can read arbitrary files from a client that uses ruby-mysql to communicate to a rogue MySQL server and issue database queries. In these cases, the server has the option to create a database reply using the LOAD DATA LOCAL statement, which instructs the client to provide additional data from a local file readable by the client (and not a "local" file on the server).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rubygems | ruby-mysql | < 2.10.0 | 2.10.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruby-Mysql Project | Ruby-Mysql | before 2.10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://www.rapid7.com/blog/post/2022/06/28/cve-2021-3779-ruby-mysql-gem-client-file-read-fixed/
- https://github.com/advisories/GHSA-73pr-g6jj-5hc9
- https://nvd.nist.gov/vuln/detail/CVE-2021-3779
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-mysql/CVE-2021-3779.yml