CVE-2020-14853: 
MySQL Cluster vulnerability analysis and mitigation

A vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDBCluster Plugin) affects versions 8.0.21 and prior. The vulnerability, identified as CVE-2020-14853, was disclosed as part of Oracle's October 2020 Critical Patch Update (Oracle CPU).

The vulnerability has been assigned a CVSS v3.1 base score of 4.6 (Medium), with the vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L. This indicates that the vulnerability requires network access, low attack complexity, low privileges, and user interaction to exploit, potentially resulting in low impact to both integrity and availability (NetApp Advisory).

Successful exploitation of this vulnerability could lead to unauthorized modification access to a subset of MySQL Server accessible data and potential service disruption. The vulnerability may allow an attacker to cause low-level impacts to both data integrity and system availability (NetApp Advisory).

The vulnerability requires network access and user interaction for successful exploitation. It has a low attack complexity rating and requires low privileges to execute. There are no public reports of this vulnerability being actively exploited in the wild (Oracle CPU).

Oracle has released security patches to address this vulnerability in their October 2020 Critical Patch Update. Users should upgrade to the latest version of MySQL to mitigate this vulnerability. For MySQL Cluster, this includes updating to versions newer than 8.0.21 (Oracle CPU).