PyPI/mysql-connector-python CVE-2019-2435: high 8.1, EPSS 2.53%
Improper Access Control in MySQL Connector Python
Action: Upgrade mysql-connector-python to 8.0.19 or later.
pip install mysql-connector-python==8.0.19Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.0.19 | - |
| 2.1.0 | - | 2.1.8 |
Fixed versions
| 8.0.19 |
Sources
- osv: GHSA-v5rq-w2xm-7g5f
- https://nvd.nist.gov/vuln/detail/CVE-2019-2435
- https://github.com/mysql/mysql-connector-python
- https://security.netapp.com/advisory/ntap-20190118-0002
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00053.html
- http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- http://www.securityfocus.com/bid/106616
CVE-2019-2435 · published · modified · JSON