A high-severity vulnerability in an open-source SQL database has been discovered by the team at cyber security firm Rapid7.