| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/pingcap/tidb | ≥ 6.2.0, ≤ 6.4.0-alpha1≤ 6.1.2 | |
| tidb | ≥ 6.1.0, < 6.1.3< 6.4.0 | 6.1.36.4.0 |
TiDB server (importer CLI tool) prior to version 6.4.0 & 6.1.3 is vulnerable to data source name injection. The database name for generating and inserting data into a database does not properly sanitize user input which can lead to arbitrary file reads."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free