PT-2023-4867
CVE-2023-32697
·
Publicado
2023-05-23
·
Atualizado
2023-11-10
Descrição por
CVSS 2.0
10
AltaMétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
sqlite-jdbc versions 3.6.14.1 through 3.41.2.1
Description
The issue is related to a remote code execution vulnerability via JDBC URL, which can be exploited by a remote attacker to execute arbitrary code. This is due to incorrect code generation management in the SQLite JDBC library.
Recommendations
For versions 3.6.14.1 through 3.41.2.1, update to version 3.41.2.2 to resolve the issue. As a temporary workaround, consider restricting access to the JDBC URL to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾