CVE-2025-62728
2 advisories.
Maven/org.apache.hive:hive-common CVE-2025-62728: high
Hive Metastore Server is vulnerable to SQL Injection
Action: Upgrade org.apache.hive:hive-common to 4.2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.1.0 | 4.2.0 | - |
Fixed versions
| 4.2.0 |
Sources
- osv: GHSA-932v-x9x2-vq29
- https://nvd.nist.gov/vuln/detail/CVE-2025-62728
- https://github.com/apache/hive/commit/c18d0df2702130cf5d0f050e516eb8999aa56301
- https://github.com/apache/hive
- https://issues.apache.org/jira/browse/HIVE-29269
- https://lists.apache.org/thread/yj65dd8dmzgy8p3nv8zy33v8knzg9o7g
- http://www.openwall.com/lists/oss-security/2025/11/26/3
CVE-2025-62728 · published · modified · JSON
Maven/org.apache.hive:hive-metastore CVE-2025-62728: high
Hive Metastore Server is vulnerable to SQL Injection
Action: Upgrade org.apache.hive:hive-metastore to 4.2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.1.0 | 4.2.0 | - |
Fixed versions
| 4.2.0 |
Sources
- osv: GHSA-932v-x9x2-vq29#Maven/org.apache.hive:hive-metastore
- https://nvd.nist.gov/vuln/detail/CVE-2025-62728
- https://github.com/apache/hive/commit/c18d0df2702130cf5d0f050e516eb8999aa56301
- https://github.com/apache/hive
- https://issues.apache.org/jira/browse/HIVE-29269
- https://lists.apache.org/thread/yj65dd8dmzgy8p3nv8zy33v8knzg9o7g
- http://www.openwall.com/lists/oss-security/2025/11/26/3
CVE-2025-62728 · published · modified · JSON