VDB

GCVE-110-CLOUD-2020-0019

GCVE-110-CLOUD-2020-0019
Advisory Published
Vulnetix · Advisory published August 18, 2020
Researchers discovered vulnerabilities in Google Cloud SQL that allowed gaining unauthorized shell access to MySQL instances. By chaining SQL injection, parameter injection in mysqldump, and network spoofing, they were able to escape a Docker container and gain full access to the host VM running Cloud SQL.

Affected Products

VendorProductVersionsPlatforms
GCPCloud SQL
GCPCloud Services

References

advisory
advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›