CVE-2024-21262
MEDIUMMySQL Connectors <= 9.0.0 - Unauthenticated Incorrect Authorization
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-21262. PoCs published by Noah4Puppy.
AI-analyzed exploit summary This repository provides a functional exploit for CVE-2024-21262, leveraging a directory traversal vulnerability in runc to escape container boundaries and access host system files. The PoC includes scripts to automate the exploitation process, demonstrating the vulnerability in Docker environments with vulnerable versions of runc.
Description
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).
Exploits (1)
This repository provides a functional exploit for CVE-2024-21262, leveraging a directory traversal vulnerability in runc to escape container boundaries and access host system files. The PoC includes scripts to automate the exploitation process, demonstrating the vulnerability in Docker environments with vulnerable versions of runc.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L