GHSA-3f6p-5ww8-9rcr: MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials
A rogue MySQL server (or MITM) can force mysql2 to send credentials in plaintext by requesting an auth switch to mysql_clear_password. The driver complies without verifying that TLS is active.
References
- github.com/advisories/GHSA-3f6p-5ww8-9rcr
- github.com/sidorares/node-mysql2/commit/884bec56288d827939d0dd3f1f4ae476fbc8dbeb
- github.com/sidorares/node-mysql2/issues/1617
- github.com/sidorares/node-mysql2/pull/4236
- github.com/sidorares/node-mysql2/releases/tag/v3.22.0
- github.com/sidorares/node-mysql2/security/advisories/GHSA-3f6p-5ww8-9rcr
Code Behaviors & Features
Detect and mitigate GHSA-3f6p-5ww8-9rcr with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →