{"id":"CVE-2022-25834","details":"In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected command shell execution of arbitrary commands.","aliases":["BIT-percona-xtrabackup-2022-25834","BIT-percona-xtrabackup-binary-2022-25834"],"modified":"2026-03-14T11:29:15.218985Z","published":"2023-06-07T01:15:38.987Z","references":[{"type":"ADVISORY","url":"https://docs.percona.com/percona-xtrabackup/8.0/release-notes/8.0/8.0.32-26.0.html#improvements"},{"type":"ADVISORY","url":"https://www.percona.com/doc/percona-xtrabackup/2.4/index.html"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"2.2.24"}]},{"events":[{"introduced":"3.0"},{"last_affected":"8.0.27-19"}]},{"events":[{"introduced":"0"},{"last_affected":"2.2.24"}]},{"events":[{"introduced":"3.x"},{"last_affected":"8.0.27-19"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25834.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}