SQL Injection Vulnerability in Apache Flink CDC Product by Apache

CVE-2025-62228

What is CVE-2025-62228?

Apache Flink CDC version 3.4.0 is susceptible to a SQL injection vulnerability, allowing attackers to exploit crafted database or table names. Although this can only be triggered by a logged-in database user, it poses significant security risks. Users are strongly advised to update to Flink CDC version 3.5.0, which resolves this vulnerability and enhances overall database security.

References