> CVE-2025-62228

« BACK_TO_HOME
PUBLISHED
2025-10-09 14:15
MODIFIED
2025-10-09 15:50
EPSS (Prob. Exploit)
0.46%
Top 60.0%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-10-28

> DESCRIPTION

Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, we recommend users update Flink CDC version to 3.5.0 which address this issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-wqm3-w3p6-xjgm MODERATE

Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers

AFFECTED PACKAGES:
MAVEN / org.apache.flink:flink-connector-mysql-cdc
>= 3.0.0, < 3.5.0
Fixed in: 3.5.0
MAVEN / org.apache.flink:flink-connector-sqlserver-cdc
>= 3.0.0, < 3.5.0
Fixed in: 3.5.0
MAVEN / org.apache.flink:flink-connector-db2-cdc
>= 3.0.0, < 3.5.0
Fixed in: 3.5.0
MAVEN / org.apache.flink:flink-connector-oracle-cdc
>= 3.0.0, < 3.5.0
Fixed in: 3.5.0
MAVEN / org.apache.flink:flink-cdc-pipeline-connectors
>= 3.0.0, < 3.5.0
Fixed in: 3.5.0

> HISTORIQUE DES MODIFICATIONS

Première apparition
09/10/2025 14:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:08
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME