vendor:
H2 Database
by:
1F98D
7.5
CVSS
HIGH
Code Execution
CWE
Product Name: H2 Database
Affected Version From: 1.4.0199
Affected Version To: 1.4.0199
Patch Exists: NO
Related CWE:
CPE: h2_database
Platforms Tested: Windows 10 x64
2020
H2 Database 1.4.199 – JNI Code Execution
H2 allows users to gain code execution by compiling and running Java code. This exploit utilizes the Java Native Interface to load a Java class without needing to use the Java Compiler.
Mitigation:
Update to a patched version of H2 Database