CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2025-62228

MEDIUM
5.1
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-10-09
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, we recommend users update Flink CDC version to 3.5.0 which address this issue.

Affected Platforms (CPE)

📦
Apache

Flink Cdc

= 3.4.0

References & Advisories

🔗 https://lists.apache.org/thread/3dn0hc1wbc5sj0jbgdg33gtnwlw7qrl3
🔗 http://www.openwall.com/lists/oss-security/2025/10/09/2

相關漏洞威脅

CVE-2026-106475.3

The USB CDC-NCM device class (subsys/usb/device_next/class/usbd_cdc_ncm.c) ignores the return value of usbd_ep_enqueue() in its et...

CVE-2026-405646.5

Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes O...

CVE-2026-316175.5

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_...

CVE-2026-234487.8

In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds chec...

CVE-2025-62228 Detail & Impact Analysis | CVSS 5.1 (MEDIUM) | Cyber-Sec.Space | Cyber-Sec.Space