Debian/h2database: critical 9.8

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a dif

Action: Upgrade h2database to 2.1.210-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2022-23221
• https://security-tracker.debian.org/tracker/CVE-2022-23221

published 2022-01-19T17:15:09Z · modified 2026-10-15T08:02:08.797284162Z · JSON