Puppet puppetlabs-mysql
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-3276 | unspecified – < 13.0.0 | Puppetlabs-mysql Command Injection | HIGH 8.8 | 1.7 % | ||
| CVE-2018-6508 | prior to 5.2.1 | Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the fa | HIGH 8.0 | 1.9 % |