CVE-2022-21687

CVE-2022-21687 is an arbitrary file read vulnerability affecting gh-ost versions prior to 1.1.3, an online schema migration tool for MySQL. The vulnerability stems from improper sanitization of user input in the -database parameter, allowing an attacker to read arbitrary files. Exploitation requires either direct access to the target host or tricking an administrator into executing a malicious gh-ost command, along with network access to a malicious MySQL server. This vulnerability has a CVSS score of 6.5 (Medium) and is not known to be actively exploited, with no public exploit code or significant community discussion.