CVE-2023-1419

Published: Nov 17, 2024Modified: Jun 17, 2026Deferred

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: secalert@redhat.com (Secondary)

Description

A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.

Related CWEs

CWE-233

Improper Handling of Parameters

The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.

References (2)

https://access.redhat.com/security/cve/CVE-2023-1419

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2178722

Source: secalert@redhat.com

Timeline

No history available yet.