https://bugzilla.redhat.com/show_bug.cgi?id=2020583
Sandipan Roy <saroy(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Fixed In Version| |MySQL Connector/J 8.0.27
--- Doc Text *updated* ---
MySQL Connector/J has no security check when external general entities are included in XML
sources, consequently, there exists an XML External Entity(XXE) vulnerability. A
successful attack can access to critical data or gain full control/access to all MySQL
Connectors' accessible data without any authorization.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2020583