Описание
The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of this attack is that the attacker has obtained the account and password. Otherwise, the attacker cannot perform this attack.
Ссылки
- Mailing List
Уязвимые конфигурации
EPSS
8.5 High
CVSS3
Дефекты
Связанные уязвимости
The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of this attack is that the attacker has obtained the account and password. Otherwise, the attacker cannot perform this attack.
Уязвимость библиотеки пользовательского интерфейса Lite UI программного средства для планирования задач Apache ShardingSphere ElasticJob-UI, связанная с ошибкой назначения внутреннего индекса интерфейса, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
EPSS
8.5 High
CVSS3