← All advisories

Moderate severityNVD Advisory· Published Aug 12, 2019· Updated Aug 5, 2024

CVE-2019-14939

CVE-2019-14939

Description

An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mysqlnpm	>= 2.17.1, < 2.18.0	2.18.0

Affected products

2

mysqljs/mysqldescription
ghsa-coords
pkg:npm/mysql
Range: >= 2.17.1, < 2.18.0

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-f982-mxwc-3mrxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-14939ghsaADVISORY
bugs.debian.org/cgi-bin/bugreport.cgighsaWEB
github.com/mysqljs/mysql/commit/337e87ae5fcea3667864197c65dc758517fcde06ghsaWEB
github.com/mysqljs/mysql/issues/2257mitrex_refsource_MISC
github.com/mysqljs/mysql/issues/2471ghsaWEB
web.archive.org/web/20190812004403/https://github.com/mysqljs/mysql/issues/2257ghsaWEB

News mentions

0

No linked articles in our index yet.