CVE-2021-1998

CVE-2021-1998 is a low-severity vulnerability affecting MySQL Server versions 8.0.20 and prior, specifically within the Optimizer component. A highly privileged attacker with network access can exploit this to achieve unauthorized data modification (insert, update, delete) and cause a partial denial of service. Despite its network-based attack vector and low attack complexity, the vulnerability requires high privileges, resulting in a CVSS 3.1 score of 3.8. There is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low current threat level.