AIKIDO-2025-10068
mysql-connector-java is vulnerable to Remote code execution
75
CVE Score
High
Remote code execution
TL;DR
MySQL Connectors takeover vulnerability
How do I fix this?
The namespace of this package has been changed on Maven to https://mvnrepository.com/artifact/com.mysql/mysql-connector-j. Upgrade to at least version 8.2.0 of this new package.
Who does this affect?
Attacker must have network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker.
Package
Versions
0.0.1 - 8.0.33
No fix availableBackground info
mysql-connector-java is vulnerable to Remote code execution in versions 0.0.1 - 8.0.33.
Links
github.com/mysql/mysql-connector-j/blob/release/9.x/CHANGES
security.netapp.com/advisory/ntap-20231027-0007/oracle.com/security-alerts/cpuoct2023.html
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.