GitHub Advisoryadvisory · Maven

GHSA-v74c-qc46-9gg9 Apache Submarine Server Core has a SQL Injection Vulnerability

HIGH Published 2024-06-12 Modified 2025-02-13 Official page ↗
Aliases
CVE-2024-36263
Ecosystem
Maven
Packages
org.apache.submarine:submarine-server-core
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-89
Reviewed
2024-06-12

Affected packages

• Maven org.apache.submarine:submarine-server-core: <= 0.8.0 (no fix yet)

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Related

Alias · CVE (1)

  • CVE-2024-36263 ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References