H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code. NOTE: the vendor's position is "h2 is not designed to be run outside of a secure environment."
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2018-04-11T00:00:00
Updated: 2024-06-26T19:31:55.650Z
Reserved: 2018-04-11T00:00:00
Link: CVE-2018-10054
JSON object: View
NVD Information
Status : Modified
Published: 2018-04-11T20:29:00.860
Modified: 2024-06-26T20:15:12.490
Link: CVE-2018-10054
JSON object: View
Redhat Information
No data.
CWE