CVE-2022-23221 in SOA Suite

Riassunto

di MITRE • 19/01/2022

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 14/01/2022
• Divulgazione: 19/01/2022
• Moderazione: accettato
• Voce: 4
• Collegare: mostrare
• CPE: pronto
• CWE: CWE-88 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.64766
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-23221
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-23221
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-23221/