CVE-2010-1848: Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authentic...

Security readout for executives and security teams

This flaw let an authenticated MySQL user use directory traversal in a table name to bypass intended table permissions. On affected MySQL 5.1 releases, the impact could include reading or deleting arbitrary table content. The evidence does not show public active exploitation. Exposure is most likely in legacy environments still running old MySQL 5.0 or pre-5.1.47 5.1 builds, especially where untrusted or low-privilege users can authenticate to the database. Treat this as high priority only where legacy MySQL remains in service. It is old, authenticated, and not KEV-listed, but the possible data read and deletion impact warrants prompt remediation on exposed systems. Mitigation focus: Upgrade affected MySQL deployments using vendor-supported packages or fixed releases.; Check Ubuntu, Red Hat, Apple, SUSE, Mandriva, or MySQL advisories for platform-specific guidance.; Remove or isolate obsolete MySQL 5.0 and 5.1 instances where upgrade is unavailable..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.