CRITICAL 9.8
GHSA-7fxj-fr3v-r9gj
TiDB vulnerable to Use of Externally-Controlled Format String
상세
TiDB server (importer CLI tool) prior to version 6.4.0 & 6.1.3 is vulnerable to data source name injection. The database name for generating and inserting data into a database does not properly sanitize user input which can lead to arbitrary file reads."
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
Go / github.com/pingcap/tidb
최초 영향 버전:
0 No fixed version published yet for github.com/pingcap/tidb (go modules). Pin to a known-safe version or switch to an alternative.
Go / github.com/pingcap/tidb
최초 영향 버전:
6.2.0 No fixed version published yet for github.com/pingcap/tidb (go modules). Pin to a known-safe version or switch to an alternative.