CVE-2019-14939: MySQL for Node.js Unsafe Options – CVSS 5.5 · Watchpost

← All vulnerabilities

MySQL for Node.js Unsafe Options

보통 5.5CVE-2019-14939 · GHSA-f982-mxwc-3mrx · Published 12/08/2019 · updated 17/06/2026

요약

CVE-2019-14939은(는) mysql (mysql project), mysql에 영향을 주는 보통 (CVSS 5.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.38%, 전체 취약점의 32.6%보다 높음.
조치: 2.18.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
mysql mysql_project	`= 2.17.1`	No fix yet
mysql npm	`≥ 2.17.1, < 2.18.0`	`2.18.0`

Description

An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.

NVD description

An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.

References

nvd.nist.gov/vuln/detail/CVE-2019-14939 · ADVISORY
mysqljs/mysql · WEB
mysqljs/mysql commit 337e87a · WEB
bugs.debian.org/cgi-bin/bugreport.cgi · WEB
mysqljs/mysql · PACKAGE
web.archive.org/web/20190812004403/https://github.com/mysqljs/mysql/issues/2257 · WEB
mysqljs/mysql · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free