{"id":"CVE-2025-62228","aliases":[],"url":"https://o3.security/vulnerability/CVE-2025-62228","summary":"Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in…","details":"Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, we recommend users update Flink CDC version to 3.5.0 which address this issue.","published":"2025-10-09T14:15:55.533","modified":"2026-06-17T09:51:35.873","cvss":{"score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"https://lists.apache.org/thread/3dn0hc1wbc5sj0jbgdg33gtnwlw7qrl3"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2025/10/09/2"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T09:51:35.873"}}