CVE-2023-22102：8.9/10 ：MySQL Connectors takeover vulnerability · apache/incubator-seata#8101 | Good First Issue

(3 评论) (0 反应) (0 负责人)Java (8,878 fork)batch import

good first issuetask: help-wanted

仓库指标

Star: (25,960 star)
PR 合并指标: (平均合并 13天 1小时) (30 天内合并 13 个 PR)

描述

Check Ahead

I have searched the issues of this repository and believe that this is not a duplicate.
I am willing to try to fix this bug myself.

Ⅰ. Issue Description

https://github.com/advisories/GHSA-m6vm-37g8-gqvh

Ⅱ. Describe what happened

No response

Ⅲ. Describe what you expected to happen

No response

Ⅳ. How to reproduce it (as minimally and precisely as possible)

No response

Ⅴ. Anything else we need to know?

No response

Ⅵ. Environment

No response

贡献者指南

研究方向: 在构建配置（例如 pom.xml）中找到 MySQL 连接器依赖项，并将其更新为已解决 CVE 2023-22102 的版本。验证与项目的 Java 版本和其他依赖项的兼容性。
技术栈: javamysql
领域: backenddatabasesecurity
议题类型: 安全
难度: 2
预计时间: 1-3 小时
活动状态: 新近可参与
清晰度: 清晰
前置要求: JavaMaven
新手友好度: 70