漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server
Vulnerability Description
aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL server that emulates authorization, ignores client flags and requests arbitrary files from the client by sending a LOAD_LOCAL instruction packet. This issue has been patched in version 0.3.0.
CVSS Information
N/A
Vulnerability Type
文件名或路径的外部可控制
Vulnerability Title
aiomysql 安全漏洞
Vulnerability Description
aiomysql是aio-libs开源的一个MySQL访问库。 aiomysql 0.3.0之前版本存在安全漏洞，该漏洞源于未检查客户端设置，可能导致恶意服务器获取客户端任意文件。
CVSS Information
N/A
Vulnerability Type
N/A