VulnerabilityModified
CVE-2022-21687
Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability.
MEDIUM 6.5EPSS 1.00%
Does this matter?
Lower severity and a low EPSS score (1.00%). Track it; it rarely justifies an emergency change on its own.
Description
gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus network access from host running gh-ost to the attack's malicious MySQL server. The `-database` parameter does not properly sanitize user input which can lead to arbitrary file reads.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 1.00% probability · 61th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- github/gh-ost
- Source
- security-advisories@github.com
References
- https://github.com/github/gh-ost/commit/a91ab042de013cfd8fbb633763438932d9080d8fPatch, Third Party Advisory
- https://github.com/github/gh-ost/security/advisories/GHSA-rrp4-2xx3-mv29Third Party Advisory
- https://github.com/github/gh-ost/commit/a91ab042de013cfd8fbb633763438932d9080d8fPatch, Third Party Advisory
- https://github.com/github/gh-ost/security/advisories/GHSA-rrp4-2xx3-mv29Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.