← CVE Intelligence

CVE-2021-3779

Ruby-MySQL Gem Client File Read PUBLISHED

Description (CNA)

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later.

Affected (CNA)

Vendor / productVersions
Tomita Masahiro / ruby-mysqlaffected 2.9.14 through 2.9.14

CWE

CWE-610

References

ADP enrichment

CVE

No English description supplied.