CVE-2023-1419: 
Java vulnerability analysis and mitigation

A script injection vulnerability (CVE-2023-1419) was discovered in the Debezium database connector. The vulnerability stems from improper parameter sanitization in the connector. This security flaw was publicly disclosed and affects Debezium database systems (Red Hat Portal).

The vulnerability has been assigned a CVSS v3.1 base score of 5.9 (Moderate), with the following vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N. The technical assessment indicates that this is a network-accessible vulnerability with high attack complexity, requiring no privileges or user interaction. The vulnerability is classified under CWE-233 (Improper Handling of Parameters) (Red Hat Portal).

The vulnerability allows attackers to send malicious requests to inject parameters, potentially leading to unauthorized data access. The impact is primarily focused on confidentiality, with high potential impact on data exposure, while integrity and availability remain unaffected (Red Hat Portal).

The vulnerability has been addressed in Debezium version 2.3.0.Alpha1. Users are recommended to upgrade to this or later versions to mitigate the security risk (Bugzilla).