Description
GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Huawei | GaussDB 200 | 6.5.1 | — |