Skip to content

Vendor

io.debezium vulnerabilities

1 published CVE affecting io.debezium, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of io.debezium alerts

Products

Latest io.debezium CVEs

Newest publication first

  1. CVE-2023-1419 Debezium: script injection via connector parameter

    Published
    MediumCVSS 5.9 EPSS 0.39%

    A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.