exploitDog

GHSA-4rwg-mr3v-x763

Опубликовано: 10 авг. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.

Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.

Ссылки

EPSS

Процентиль: 51%

0.00687

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-20

Связанные уязвимости

CVE-2026-42537

CVSS3: 9.8

nvd

около 1 месяца назад

Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.

EPSS

Процентиль: 51%

0.00687

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-20