title: Ruby-MySQL Gem Client File Read
description: A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later.
problem types: CWE-610 Externally Controlled Reference to a Resource in Another Sphere
affected:
{
product: ruby-mysql
vendor: Tomita Masahiro
versions:
lessThanOrEqual: 2.9.14, status: affected, version: 2.9.14, versionType: custom
}
solutions: Update to version 2.10.0 or later of ruby-mysql