Skip to content

Commit

Permalink
add poorly annotated cve
Browse files Browse the repository at this point in the history
  • Loading branch information
SemProvoost committed Feb 3, 2025
1 parent a72d35b commit e281e8c
Showing 1 changed file with 16 additions and 11 deletions.
27 changes: 16 additions & 11 deletions input/new.json
Original file line number Diff line number Diff line change
@@ -1,15 +1,20 @@
{
"package_name": "",
"package_name": "mysql-connector-java",
"patch_versions": [],
"vulnerable_ranges": [],
"vulnerable_ranges": [
[
"0.0.1",
"8.0.33"
]
],
"cwe": [],
"tldr": "",
"doest_this_affect_me": "",
"how_to_fix": "",
"vulnerable_to": "",
"related_cve_id": "",
"language": "",
"severity_class": "",
"aikido_score": 0,
"changelog": ""
"tldr": "MySQL Connectors takeover vulnerability",
"doest_this_affect_me": "Attacker must have network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker.",
"how_to_fix": "The namespace of this package has been changed on Maven to https://mvnrepository.com/artifact/com.mysql/mysql-connector-j. Upgrade to at least version 8.2.0 of this new package.",
"vulnerable_to": "Remote code execution",
"related_cve_id": "CVE-2023-22102",
"language": "JAVA",
"severity_class": "HIGH",
"aikido_score": 75,
"changelog": "https://github.com/mysql/mysql-connector-j/blob/release/9.x/CHANGES"
}

0 comments on commit e281e8c

Please sign in to comment.