Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

Maven package

org.apache.seatunnel:seatunnel

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 8.7MavenPublished

    Apache SeaTunnel SQL Injection vulnerability

    CVE-2023-49198 · GHSA-8m84-h9hh-3cfh

    Affected
    • Maven org.apache.seatunnel:seatunnel >= 1.0.0, <= 1.0.0
    Fixed in
    1.0.1· Vendor fix available
    Issue
    Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360 This issue affects Apache SeaTunnel: 1.0.0. Users are recommended to upgrade to version [1.0.1], which fixes the issue.

    Recommended action: Upgrade to 1.0.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →