h2database-rce-poc

H2 Console RCE Exploit Toolkit Vulnerability exploitation scr...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.11 Security update (Important) (RHSA-2024:10207)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10207 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release ...

USN-6834-1: H2 vulnerabilities

It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. CVE-2021-42392 It was discovered that H2 incorrectly handled some specially crafted connection URLs. An attacker could possibly use this issue to...

Ubuntu 16.04 LTS / 18.04 LTS : H2 vulnerabilities (USN-6834-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6834-1 advisory. It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 7

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 8 (Moderate) (RHSA-2022:4919)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4919 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 7 (Moderate) (RHSA-2022:4918)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4918 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

USN-5365-1: H2 vulnerabilities

It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. CVE-2021-42392 It was discovered that H2 incorrectly handled some specially crafted connection URLs. An attacker could possibly use this issue to...

Ubuntu 20.04 LTS : H2 vulnerabilities (USN-5365-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5365-1 advisory. It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code...

Debian DSA-5076-1 : h2database - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5076 advisory. Security researchers of JFrog Security and Ismail Aydemir discovered two remote code execution vulnerabilities in the H2 Java SQL database engine which can b...

[SECURITY] [DSA 5076-1] h2database security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5076-1 [email protected] https://www.debian.org/security/ Markus Koschany February 15, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2923-1] h2database security update

Debian LTS Advisory DLA-2923-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 15, 2022 https://wiki.debian.org/LTS Package : h2database Version : 1.4.193-1+deb9u1 CVE ID : CVE-2021-42392 CVE-2022-23221 Debian Bug : 1003894 Security researchers of JFrog...

H2 Database Console Remote Code Execution Exploit

The H2 Database console suffers from an unauthenticated remote code execution vulnerability. Document Title =============== Unauthenticated RCE vuln in the H2 Database console: CVE-2022-23221. Product Description =============== The H2 Console Application The Console lets you access a SQL databas...

H2 Database Console Remote Code Execution

Document Title =============== Unauthenticated RCE vuln in the H2 Database console: CVE-2022-23221. Product Description =============== The H2 Console Application The Console lets you access a SQL database using a browser interface. Homepage: http://www.h2database.com/html/quickstart.html Affecte...

com.rapiddweller:rapiddweller-benerator-ce (1.0.1+jdk-8), org.databene:databene-benerator (>=0.6.4, <=0.9.8) +2 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.2.136)

com.h2database:h2 MAVEN version 1.2.136 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - com.rapiddweller:rapiddweller-benerator-ce 1.0.1+jdk-8 - org.databene:databene-benerator =0.6.4, =0.6.1, =0.6.4, =0.7.1...

cn.sparrowmini:sparrow-org-service (0.0.1), cn.sparrowmini:sparrow-pem-service (0.0.1) +142 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.4.194)

com.h2database:h2 MAVEN version 1.4.194 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - cn.sparrowmini:sparrow-org-service 0.0.1 - cn.sparrowmini:sparrow-pem-service 0.0.1 - com.btc-ag.redg:redg-jpa-providers...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ch.sahits.game:openpatriciantest (>=0.9.1-rc1, <=0.9.1) +827 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.4.196)

com.h2database:h2 MAVEN version 1.4.196 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 - ch.sahits.game:openpatriciantest =0.9.1-rc1, =1.0.25, =1.0.25, =1.0.25, =1.0.25,...

ch.dissem.jabit:jabit-demo (0.2.0), ch.dissem.jabit:jabit-repositories (0.2.0) +220 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.4.187)

com.h2database:h2 MAVEN version 1.4.187 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - ch.dissem.jabit:jabit-demo 0.2.0 - ch.dissem.jabit:jabit-repositories 0.2.0 - co.paralleluniverse:comsat-test-utils 0.4.0 -...

org.apache.james:james-server-container-spring (>=3.0-m1, <=3.0-m2), org.apache.james:james-server-user-jcr (>=3.0-m1, <=3.0-m2) +2 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.1.102)

com.h2database:h2 MAVEN version 1.1.102 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - org.apache.james:james-server-container-spring =3.0-m1, =3.0-m1, =3.0-m1, =3.0-m1, =3.0-m2 Source cves: CVE-2022-23221 Sour...

org.ow2.bonita:bonita-api-impl (5.0.m2), org.ow2.bonita:bonita-api-impl-ejb (5.0.m2) +14 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.1.106)

com.h2database:h2 MAVEN version 1.1.106 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - org.ow2.bonita:bonita-api-impl 5.0.m2 - org.ow2.bonita:bonita-api-impl-ejb 5.0.m2 - org.ow2.bonita:bonita-deployment 5.0.m2...