Vulnerabilities > Percona > Xtrabackup > 8.0.7

DATE CVE VULNERABILITY TITLE RISK
2023-06-07 CVE-2022-25834 Command Injection vulnerability in Percona Xtrabackup
In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected command shell execution of arbitrary commands.
local
low complexity
percona CWE-77
7.8
7.8
2020-04-27 CVE-2020-10997 Improper Input Validation vulnerability in Percona Xtrabackup
Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output.
network
low complexity
percona CWE-20
4.0
4.0