Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L).

Remediation

References

CVE-2024-21237

Related Vulnerabilities

WordPress Plugin 10Web Map Builder for Google Maps Cross-Site Scripting (1.0.69)

silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4959)

Ruby on Rails Deserialization of Untrusted Data Vulnerability (CVE-2020-8165)

WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.8)

WordPress Plugin Transposh WordPress Translation Multiple Vulnerabilities (1.0.8.1)

Severity

Low

Classification

CVE-2024-21237 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

Tags

Missing Update Known Vulnerabilities