GHSA-jf2m-435m-mxw8CriticalCVSS 9.1

SQL Injection in hive-jdbc

Published
November 21, 2018
Last Modified
April 19, 2024

🔗 CVE IDs covered (1)

CVE-2018-1282 →

📋 Description

This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation.

🎯 Affected products1

  • maven/org.apache.hive:hive-jdbc:>= 0.7.1, < 2.3.3

🔗 References (4)