CVEvulnerability

CVE-2023-29194

2.7 LOW Published 2023-04-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-04-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-20, CWE-703

Description

Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing `/` characters such that from that point on, anyone who tries to view keyspaces from VTAdmin will receive an error. Trying to list all the keyspaces using `vtctldclient GetKeyspaces` will also return an error. Note that all other keyspaces can still be administered using the CLI (vtctldclient). This issue is fixed in version 16.0.1. As a workaround, delete the offending keyspace using a CLI client (vtctldclient).

Affected configurations

• linuxfoundation vitess (< 16.0.1)

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-703 Improper Check or Handling of Exceptional Conditions weakness

References