com.diabolicallabs:vertx-process-manager (0.8), org.atteo:evo-h2 (0.6) +5 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.3.161)

com.h2database:h2 MAVEN version 1.3.161 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - com.diabolicallabs:vertx-process-manager 0.8 - org.atteo:evo-h2 0.6 - org.drools:drools-camel-server =5.3.1.final,...

edu.uiuc.ncsa.myproxy:oa4mp-server-admin (1.0.6), edu.uiuc.ncsa.myproxy:oa4mp-webapp (1.0.6) +4 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.3.165)

com.h2database:h2 MAVEN version 1.3.165 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - edu.uiuc.ncsa.myproxy:oa4mp-server-admin 1.0.6 - edu.uiuc.ncsa.myproxy:oa4mp-webapp 1.0.6 - org.codehaus.jtstand:jtstand-co...

com.blazebit:blaze-persistence-cdi-showcase (>=1.2.0-alpha3, <=1.2.0-alpha4), com.blazebit:blaze-persistence-examples-showcase-runner-cdi (>=1.2.0-alpha5, <=1.4.0-alpha1) +19 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.4.183)

com.h2database:h2 MAVEN version 1.4.183 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - com.blazebit:blaze-persistence-cdi-showcase =1.2.0-alpha3, =1.2.0-alpha5, =1.2.0-alpha5, =1.2.0-alpha3, =0.0.5, =0.0.18,...

ai.lum:odinson-core_2.12 (>=0.1.0, <=0.6.1), ai.lum:odinson-extra_2.12 (>=0.2.0, <=0.2.3) +27 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.4.198)

com.h2database:h2 MAVEN version 1.4.198 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - ai.lum:odinson-core2.12 =0.1.0, =0.2.0, =0.2.0, =v1.0.0, =v1.0.0, =2.3.1, =0.13.1, =0.15.0, =0.3, =0.15.0, =0.14.0, =0.1.0,...

org.test4j:test4j.integrated (>=2.0.4, <=2.0.7) potentially affected by CVE-2022-23221 via com.h2database:h2 (1.1.107)

com.h2database:h2 MAVEN version 1.1.107 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - org.test4j:test4j.integrated =2.0.4, =2.0.7 Source cves: CVE-2022-23221 Source advisory: OSV:GHSA-45HX-WFHJ-473X...

CVE-2021-42392

A flaw was found in h2. The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. This flaw allows an attacker to use this URL to send another server’s code, causing remote code execution. This issue is exploited...

H2 database code issue vulnerability

H2 database is an embeddable Rdbms written in Java . A code issue vulnerability exists in H2 database, which stems from the H2 database's getConnection method taking the driver's class name and the database's URL as parameters, which can be exploited by an attacker to pass the name of the JNDI...

A similar vulnerability like Log4shell discovered in H2 database console

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. An unauthenticated remote code execution vulnerability similar to Log4shell has been discovered in H2 Database a popular Java SQL database console and has been assigned CVE-2021-42392. It is claimed to be similar to the...

CVE-2021-42392

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

DEBIAN-CVE-2021-42392

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

CVE-2021-42392

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

CVE-2021-42392

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

UBUNTU-CVE-2021-42392

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

Remote code execution

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

CVE-2021-42392

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

H2database代码问题漏洞

H2 database is an embeddable Rdbms written in Java . A code issue vulnerability exists in H2 database, which stems from the H2 database's getConnection method taking the driver's class name and the database's URL as parameters, which can be exploited by an attacker to pass the name of the JNDI...

Log4J-Related RCE Flaw in H2 Database Earns Critical Warning

Researchers discovered a bug related to the Log4J logging library vulnerability, which in this case opens the door for an adversary to execute remote code on vulnerable systems. However, this flaw does not pose the same risk as the previously identified in Log4Shell, they said. JFrog security...

Log4Shell-like Critical RCE Flaw Discovered in H2 Database Console

Researchers have disclosed a security flaw affecting H2 database consoles that could result in remote code execution in a manner that echoes the Log4j "Log4Shell" vulnerability that came to light last month. The issue, tracked as CVE-2021-42392, is the "first critical issue published since...

Vulnerability fixed in H2 Database Console

A vulnerability has been found in the Console component of H2 Database. This vulnerability allows a local malicious person to to execute arbitrary code under application privileges. Researchers at JFrog found this vulnerability during additional research on Java vulnerabilities following Log4j. S...

CVE-2021-42392

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...