CVE-2022-25834

In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected command shell execution of arbitrary commands.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2023-06-07

Last modified

2025-01-07

Weaknesses

CWE-77

Affected products

• Xtrabackup (Percona)

References

• https://docs.percona.com/percona-xtrabackup/8.0/release-notes/8.0/8.0.32-26.0.html#improvements
• https://www.percona.com/doc/percona-xtrabackup/2.4/index.html