제출 #649728: h2oai h2o-3 <=v3.46.08 Deserialization정보

제목h2oai h2o-3 <=v3.46.08 Deserialization
설명In H2O-3, the blacklist-based filtering of JDBC parameters is incomplete, which allows attackers to exploit H2 JDBC deserialization. This attack remains viable in the latest version.
원천⚠️ https://github.com/ez-lbz/poc/issues/51
사용자
 ez-lbz (UID 87033)
제출2025. 09. 07. AM 03:05 (1 년도 ago)
모더레이션2025. 09. 21. AM 10:16 (14 days later)
상태수락
VulDB 항목325125 [h2oai h2o-3 까지 3.46.08 H2 JDBC Driver /99/ImportSQLTable connection_url 권한 상승]
포인트들15

◂ 이전개요다음 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!