Red Hat Integration Change Data Capture

2 results · Clear filters · Feed

• Medium 5.9
  CVE-2023-1419

  Debezium: script injection via connector parameter

  A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.

  Red Hat Red Hat Integration Change Data Capture Red Hat build of Debezium io.debezium:debezium-connector-mysql Maven
  Nov 17, 2024
• Medium 4.3
  CVE-2022-4245

  Codehaus-plexus: xml external entity (xxe) injection

  A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Maven
  Sep 25, 2023