A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user.
CVSS 3.1MEDIUM 6.5·Network·No auth·User interaction·EPSS 0.01192·Published 2022-06-28·Fixed in 2.10.0CWE-610