Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 06/02/2025 Updated: 06/02/2025

Remote Code Execution in Apache ShardingSphere ElasticJob-UI via H2 JDBC URL

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an malicious user to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of this attack is that the attacker has obtained the account and password. Otherwise, the attacker cannot perform this attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache software foundation apache shardingsphere elasticjob-ui

CWE-913 https://nvd.nist.gov https://www.first.org/epss https://lists.apache.org/thread/pg0k223m4hsnnzg4nh7lxvdxxgbkrlqb

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-31764

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect