CVE-2023-32697 Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled

SQLite JDBC is a library for accessing and creating SQLite database files in Java. Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. This issue impacting versions 3.6.14.1 through 3.41.2.1 and has been fixed in version 3.41.2.2...

Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled

Summary Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. Impacted versions : 3.6.14.1-3.41.2.1 References https://github.com/xerial/sqlite-jdbc/releases/tag/3.41.2.2...

Aiven Ltd: [Kafka Connect] [JdbcSinkConnector][HttpSinkConnector] RCE by leveraging file upload via SQLite JDBC driver and SSRF to internal Jolokia

Summary: The Aiven JDBC sink includes the SQLite JDBC Driver. This JDBC driver can be used to upload SQLite database files onto the server. The HTTP sink connector allows sending HTTP requests to localhost. There is unprotected Jolokia listening on localhost:6725. JMX exports the...