Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Versions of the package mysql2 before 3.9.3 are vulnerable to Improper Input Validation through the keyFromFields function, resulting in cache poisoning. An attacker can inject a colon (:) character within a value of the attacker-crafted key.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Vulnerability Type
输入验证不恰当
Vulnerability Title
MySQL2 安全漏洞
Vulnerability Description
MySQL2是Andrey Sidorov个人开发者的一个 Node.js 的 MySQL 客户端。 MySQL2 3.9.3之前版本存在安全漏洞，该漏洞源于通过 keyFromFields 函数进行不正确的输入验证，从而导致缓存中毒。
CVSS Information
N/A
Vulnerability Type
N/A