high7.5
CVE-2023-49198
Apache SeaTunnel SQL Injection vulnerability
Impact
Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360 This issue affects Apache SeaTunnel: 1.0.0. Users are recommended to upgrade to version [1.0.1], which fixes the issue.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.apache.seatunnel:seatunnel | = 1.0.0 | 1.0.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Seatunnel | Version 1.0.0 |