A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| ruby-mysql(RubyGems) | 0 | 2.10.0 | N/A |
CVSS Metrics
