← Database

CVE-2021-3779

MEDIUM CVSS: 6.5 Published: 2022-06-28 Modified: 2026-06-17

Description

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later.

Affected Platforms

Ruby-Mysql Project Ruby-Mysql

Weakness Type

CWE-610, CWE-610

References