tmtm/ruby-mysql · Security
Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql
- GHSA ID
- GHSA-73pr-g6jj-5hc9
- CVE ID
- CVE-2021-3779
- Severity
- medium
- Published
- Updated
- CVSS
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS v3
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
A malicious actor can read arbitrary files from a client that uses ruby-mysql to communicate to a rogue MySQL server and issue database queries. In these cases, the server has the option to create a database reply using the LOAD DATA LOCAL statement, which instructs the client to provide additional data from a local file readable by the client (and not a "local" file on the server).
CWEs
- CWE-610 · Externally Controlled Reference to a Resource in Another Sphere