Skip to content
OpenAdvisories

Vendor

vitessio

8 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.4

    Vitess users with backup storage access can gain unauthorized access to production deployment environments

    Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can manipulate backup manifest files so that arbitrary code is later …