~ / search / GHSA-6phf-6h5g-97j2

GHSA-6phf-6h5g-97j2

Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled

Source: GitHub Advisory Database (reviewed) High CVE-2023-32697

Packages

EcosystemPackageAffectedFixed in
Maven org.xerial:sqlite-jdbc >= 3.6.14.1, < 3.41.2.2 3.41.2.2

Details

As written in the advisory (Markdown source, shown as plain text).

## Summary Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. ## Impacted versions : 3.6.14.1-3.41.2.1 ## References https://github.com/xerial/sqlite-jdbc/releases/tag/3.41.2.2

References

External links from the advisory. They lead to third-party sites.