A high-severity SQL injection vulnerability in the WsgiDAV MySQLBrowserProvider allows unauthenticated remote attackers to extract sensitive database information.

This vulnerability is a SQL injection (CWE-89) stemming from the improper neutralization of input in the MySQLBrowserProvider component. Because the affected methods concatenate request keys directly into SQL queries, an unauthenticated attacker can perform unauthorized data extraction or status code oracle attacks.

The potential for unauthorized data exfiltration poses a significant risk to the confidentiality of any information stored within the connected MySQL database. With a CVSS score of 8.8, this vulnerability is considered High, as it provides a direct path for attackers to bypass access controls and compromise backend data stores without requiring authentication.

Immediate Action: Update WsgiDAV to version 4.3.5 or later to incorporate the necessary input sanitization fixes.

Proactive Monitoring: Review application and database logs for unusual GET requests containing SQL syntax, such as UNION or SELECT statements, directed at shares utilizing the MySQLBrowserProvider.

Compensating Controls: If an immediate update is not feasible, ensure that the non-default MySQLBrowserProvider is disabled and use a Web Application Firewall (WAF) to block requests containing suspicious SQL injection patterns.

Public Exploit Available: Unknown.

Given the ease of exploitability and the potential for direct database access, organizations should prioritize upgrading to version 4.3.5 immediately. While the provider is not enabled by default, administrators should verify their configuration to ensure this component is not active in their environment.