{"id":"CVE-2022-25834","details":"In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected command shell execution of arbitrary commands.","aliases":["BIT-percona-xtrabackup-2022-25834","BIT-percona-xtrabackup-binary-2022-25834"],"modified":"2026-08-12T03:51:38.831906105Z","published":"2023-06-07T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25834.json","unresolved_ranges":[{"extracted_events":[{"fixed":"2.2.24"},{"introduced":"3.x"},{"fixed":"8.0.27-19"}],"source":"DESCRIPTION"}],"cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://docs.percona.com/percona-xtrabackup/8.0/release-notes/8.0/8.0.32-26.0.html#improvements"},{"type":"WEB","url":"https://www.percona.com/doc/percona-xtrabackup/2.4/index.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25834.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25834"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/percona/percona-xtrabackup","events":[{"introduced":"0"},{"last_affected":"50dbc8dadda3da7d07019dd6e2ce8f554a572130"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:percona:xtrabackup:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.0"},{"last_affected":"8.0.27-19"}]}}],"versions":["percona-xtrabackup-8.0.27-19","percona-xtrabackup-8.0.26-18","percona-xtrabackup-8.0.25-17","percona-xtrabackup-8.0.9","clone-5.6.3-m6-build","clone-5.6.3-m5-build","clone-5.4.0-build","mysqlsummit-0.2.1-build","mysqlsummit-0.2.1","mysqlsummit-0.2.0","mysqlsummit-0.2.0-build","clone-5.1.31-pv-0.2.0-build","mysql-5.1.4","clone-5.1.4-build","clone-5.1.0-build","mysql-4.0.4","mysql-4.0.2","mysql-3.23.36","mysql-3.23.33","mysql-3.23.32","mysql-3.23.31","mysql-3.23.30-gamma","mysql-3.23.28-gamma","mysql_4.0","mysql-3.23.22-beta"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25834.json"}}],"schema_version":"1.9.0"}