CVE-2023-39021

CriticalCVSS 9.8

Published: 28/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.87%

54th percentile - higher than 54% of all known CVEs

Summary

Versions wix-embedded-mysql v4.6.1 and below were found to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability can be exploited by passing an unchecked argument.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized code execution, posing a serious threat to the integrity and security of the system.

Recommendation

It is recommended to upgrade to wix-embedded-mysql version above 4.6.1 to mitigate this vulnerability.

Original NVD description (English source)

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument.