CVE-2024-21262

Summary

CVE-2024-21262 is a vulnerability affecting the MySQL Connectors product of Oracle MySQL, specifically in versions 9.0.0 and earlier. This vulnerability allows an unauthenticated attacker with network access to exploit the connectors, potentially leading to unauthorized updates, inserts, or deletions of accessible data, as well as causing partial denial of service (DoS). The attack complexity is low, and it poses medium severity with a CVSS 3.1 Base Score of 6.5; thus, organizations should take this threat seriously. To remediate this issue, users are advised to upgrade to the latest version of MySQL Connectors available from Oracle. Failure to address this vulnerability may result in compromised data integrity and availability within affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.