Apache Flink CDC
Moderate fix1 remedy
cpe:2.3:a:apache:flink:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 3.0.0, <= 3.4.0
- ~3.3
Apache Flink CDC SQL Injection Vulnerability in Affected Connectors
Vulnerability
Patched
A SQL injection vulnerability has been identified in Apache Flink CDC versions 3.0.0 through 3.4.0, excluding 3.5.0. This issue allows for injection via maliciously crafted identifiers, such as database or table names. The vulnerability can only be exploited by the logged-in database user.
Impact
Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate SQL queries to the database. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.
Remediation
Users are advised to update Apache Flink CDC to version 3.5.0, which addresses this vulnerability.
Added: Oct 9, 2025, 2:17 PM
Updated: Oct 9, 2025, 3:55 PM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
3.1exploitability
4.9remediation
7.7relevance
0.7threat
0.0urgency
5.7incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.