5.5
CVSSv3

CVE-2019-14939

Published: 12/08/2019 Updated: 21/07/2021
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

An issue exists in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mysql project mysql 2.17.1

Vendor Advisories

Debian Bug report logs - #934712 node-mysql: CVE-2019-14939 Package: src:node-mysql; Maintainer for src:node-mysql is Debian Javascript Maintainers <pkg-javascript-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 13 Aug 2019 20:21:01 UTC Severity: important Tags: securi ...