CVE-2023-49198

HIGH

Apache SeaTunnel <1.0.1 - Info Disclosure

Title source: llm

Description

Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360 This issue affects Apache SeaTunnel: 1.0.0. Users are recommended to upgrade to version [1.0.1], which fixes the issue.

References (2)

Scores

CVSS v3 7.5
EPSS 0.0031
EPSS Percentile 53.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-552
Status published

Affected Products (2)

apache/seatunnel
org.apache.seatunnel/seatunnel < 1.0.1Maven

Timeline

Published Aug 21, 2024
Tracked Since Feb 18, 2026