Debian/h2database: critical 9.8
The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to
Action: Upgrade h2database to 2.1.210-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.210-1 | - |
Fixed versions
| 2.1.210-1 |
Sources
- osv: DEBIAN-CVE-2021-42392#Debian:14/h2database
- https://security-tracker.debian.org/tracker/CVE-2021-42392
published · modified · JSON