Apache Software Foundation Apache Shardingsphere-Proxy vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_shardingsphere-proxy.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2022-45347CRITICALCVSS 9.8fixed in 5.3.02022-12-22

CVE-2022-45347 [CRITICAL] CWE-459 CVE-2022-45347: Apache ShardingSphere-Proxy prior to 5.3.0 when using MySQL as database backend didn't cleanup the d Apache ShardingSphere-Proxy prior to 5.3.0 when using MySQL as database backend didn't cleanup the database session completely after client authentication failed, which allowed an attacker to execute normal commands by constructing a special MySQL client. This vulnerability has been fixed in Apache ShardingSphere 5.3.0.