AIKIDO-2025-10068
mysql-connector-java is vulnerable to Remote code execution
75
High Risk
This Affects:
mysql-connector-javaTL;DR
MySQL Connectors takeover vulnerability
Who does this affect?
Attacker must have network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker.
Background info
mysql-connector-java is vulnerable to Remote code execution in versions 0.0.1 - 8.0.33.
How to fix this
The namespace of this package has been changed on Maven to https://mvnrepository.com/artifact/com.mysql/mysql-connector-j. Upgrade to at least version 8.2.0 of this new package.
Links
github.com/mysql/mysql-connector-j/blob/release/9.x/CHANGES
security.netapp.com/advisory/ntap-20231027-0007/oracle.com/security-alerts/cpuoct2023.html
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.