Cx6f651376-312a @ Maven-mysql:mysql-connector-java-5.1.18

[alex-ko-dev]

Vulnerable Package issue exists @ Maven-mysql:mysql-connector-java-5.1.18 in branch sha-shes/and/da_shes

MySQL Connector/J before version 5.1.44 and 6.x is vulnerable to memory leak. When using cached server-side prepared statements, a memory leak occurred as references to opened statements were being kept while the statements were being decached; it happened when either the close() method has been called twice on a statement, or when there were conflicting cache entries for a statement and the older entry had not been closed and removed from the opened statement list.

Namespace: alexey-ast-test-1-org
Repository: alexey-ast-test-1-repo
Repository Url: https://github.com/alexey-ast-test-1-org/alexey-ast-test-1-repo
CxAST-Project: alexey-ast-test-1-org/alexey-ast-test-1-repo
CxAST platform scan: 62ca22b8-0ce6-43fb-9a3e-1123a66c2a22
Branch: sha-shes/and/da_shes
Application: alexey-ast-test-1-repo
Severity: HIGH
State: TO_VERIFY
Status: RECURRENT
CWE: CWE-401

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 8.0.28

---

References
Issue
Pull request
Commit
Release Note