tocsin

Debian/h2database: critical 9.8

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a dif

Action: Upgrade h2database to 2.1.210-1 or later.

Affected

introducedfixedlast affected
02.1.210-1-

Fixed versions

2.1.210-1

Sources

published · modified · JSON