GHSA-3f6p-5ww8-9rcr: MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials
A rogue MySQL server (or MITM) can force mysql2 to send credentials in plaintext by requesting an auth switch to mysql_clear_password. The driver complies without verifying that TLS is active.
References
- github.com/advisories/GHSA-3f6p-5ww8-9rcr
- github.com/sidorares/node-mysql2/commit/884bec56288d827939d0dd3f1f4ae476fbc8dbeb
- github.com/sidorares/node-mysql2/issues/1617
- github.com/sidorares/node-mysql2/pull/4236
- github.com/sidorares/node-mysql2/releases/tag/v3.22.0
- github.com/sidorares/node-mysql2/security/advisories/GHSA-3f6p-5ww8-9rcr
Code Behaviors & Features
Detect and mitigate GHSA-3f6p-5ww8-9rcr with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →