CVE-2022-21363 @ Maven-mysql:mysql-connector-java-5.1.18

[alex-ko-dev]

Vulnerable Package issue exists @ Maven-mysql:mysql-connector-java-5.1.18 in branch master

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

Namespace: alexey-ast-test-1-org
Repository: alexey-ast-test-1-repo
Repository Url: https://github.com/alexey-ast-test-1-org/alexey-ast-test-1-repo
CxAST-Project: alexey-ast-test-1-org/alexey-ast-test-1-repo
CxAST platform scan: 360384fc-7c82-48a3-81a0-1a1e2f6064e8
Branch: master
Application: alexey-ast-test-1-repo
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
CWE: CWE-20

---

Additional Info
Attack vector: NETWORK
Attack complexity: HIGH
Confidentiality impact: HIGH
Availability impact: HIGH
Remediation Upgrade Recommendation: 8.0.16.redhat-00001

---

References
Advisory
Issue