VDB
GSD-2023-21980
GSD-2023-21980
PUBLISHED
CVSS 7.099999904632568 HIGH
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.7.41 and prior and 8.0.32 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | MySQL Server | 5.7.41 and prior, 8.0.32 and prior |
Timeline
- Oct 6, 2021 PoC Published
- Oct 5, 2023 PoC Published
- May 9, 2024 PoC Published
- Apr 28, 2025 PoC Published
- Jul 7, 2025 PoC Published
- Apr 21, 2026 CVE Published
References
- Oracle Advisory vendor-advisory
- https://security.netapp.com/advisory/ntap-20230427-0007/ url