En resumen
- CVE-2019-14939 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a mysql (mysql project), mysql.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.38%, mayor que el 32.6% de las vulnerabilidades.
- Solución: actualizar a 2.18.0 o posterior.
| Package | Affected versions | Patched versions |
|---|
| mysql | = 2.17.1
| No fix yet |
| mysql npm | ≥ 2.17.1, < 2.18.0
| 2.18.0
|
Description
An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.
NVD description
An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free