CVE-2022-21687

gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus network access from host running gh-ost to the attack's malicious MySQL server. The `-database` parameter does not properly sanitize user input which can lead to arbitrary file reads.

• CWE-20
• CWE-20

• https://github.com/github/gh-ost/commit/a91ab042de013cfd8fbb633763438932d9080d8fPatch, Third Party Advisory
• https://github.com/github/gh-ost/security/advisories/GHSA-rrp4-2xx3-mv29Third Party Advisory
• https://github.com/github/gh-ost/commit/a91ab042de013cfd8fbb633763438932d9080d8fPatch, Third Party Advisory
• https://github.com/github/gh-ost/security/advisories/GHSA-rrp4-2xx3-mv29Third Party Advisory

Published

Feb 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21681Marked is a markdown parser and compiler. Prior to version 4…7.5
• CVE-2022-21682Flatpak is a Linux application sandboxing and distribution f…6.5
• CVE-2022-21683Wagtail is a Django based content management system focused …4.3
• CVE-2022-21684Discourse is an open source discussion platform. Versions pr…8.8
• CVE-2022-21685Frontier is Substrate's Ethereum compatibility layer. Prior …6.5
• CVE-2022-21686PrestaShop is an Open Source e-commerce platform. Starting w…9.8
• CVE-2022-21688OnionShare is an open source tool that lets you securely and…5.5
• CVE-2022-21689OnionShare is an open source tool that lets you securely and…7.5
• CVE-2022-2169The Loading Page with Loading Screen WordPress plugin before…4.8
• CVE-2022-21690OnionShare is an open source tool that lets you securely and…5.4
• CVE-2022-21691OnionShare is an open source tool that lets you securely and…4.3
• CVE-2022-21692OnionShare is an open source tool that lets you securely and…4.3