Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-1419

Debezium: script injection via connector parameter

Description

A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat build of Debezium

Default version status: unaffected

Red Hat Red Hat Integration Change Data Capture

Default version status: unknown

References