CVE-2021-23463
1 advisory.
Maven/com.h2database:h2 CVE-2021-23463: high 8.1
Improper Restriction of XML External Entity Reference in com.h2database:h2.
Action: Upgrade com.h2database:h2 to 2.0.202 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.198 | 2.0.202 | - |
Fixed versions
| 2.0.202 |
Sources
- osv: GHSA-7rpj-hg47-cx62
- https://nvd.nist.gov/vuln/detail/CVE-2021-23463
- https://github.com/h2database/h2database/issues/3195
- https://github.com/h2database/h2database/pull/3199
- https://github.com/h2database/h2database/pull/3199#issuecomment-1002830390
- https://github.com/boris-unckel/h2database/commit/f9ad6aef2bfa59eba2b4d3e7c4c32d2cce8e8b05
- https://github.com/h2database/h2database/commit/d83285fd2e48fb075780ee95badee6f5a15ea7f8%23diff-008c2e4462609982199cd83e7cf6f1d6b41296b516783f6752c44b9f15dc7bc3
- https://github.com/h2database/h2database
- https://security.netapp.com/advisory/ntap-20230818-0010
- https://snyk.io/vuln/SNYK-JAVA-COMH2DATABASE-1769238
- https://www.oracle.com/security-alerts/cpuapr2022.html
CVE-2021-23463 · published · modified · JSON