3 matches found
be.cylab.mark:example (>=0.0.22 <=0.0.28), be.cylab.mark:server (>=0.0.10 <=0.0.28) +307 more potentially affected by CVE-2020-1963 via org.apache.ignite:ignite-core (>=1.0.0-RC1 <=2.8.0)
org.apache.ignite:ignite-core MAVEN version =1.0.0-RC1, =0.0.22, =0.0.10, =v1.0.0, =1.4.0, =7.6.1, =8.11.0, =8.11.0, =8.0.0, =1.0.0, =3.0.0-beta1, =1.0.0.RELEASE, =0.1.2, =0.14.0-RC1 and more Source cves: CVE-2020-1963 Source advisory: OSV:GHSA-5WM5-8Q42-RHXG...
CVE-2020-1963
Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem...
CVE-2020-1963
Apache Ignite (which uses H2 for its distributed SQL execution) has a vulnerability where H2 SQL functions could be abused to access the filesystem. The connected advisories corroborate that this vulnerability involves file-system access via H2 within Ignite. No exploit specifics, affected versio...