CVE-2024-49194
1 advisory.
Maven/com.databricks:databricks-jdbc CVE-2024-49194: high 7.3
Databricks JDBC Driver Command Injection vulnerability
Action: Upgrade com.databricks:databricks-jdbc to 2.6.40 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0 | 2.6.40 | - |
Fixed versions
| 2.6.40 |
Sources
- osv: GHSA-jxw2-jvxf-5vrp
- https://nvd.nist.gov/vuln/detail/CVE-2024-49194
- https://github.com/databricks/databricks-jdbc
- http://kb.databricks.com/en_US/data-sources/security-bulletin-databricks-jdbc-driver-vulnerability-advisory-cve-2024-49194
CVE-2024-49194 · published · modified · JSON