CVE-2022-31764

published 2025-02-06

CVE-2022-31764: The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects…

Priority P3 52 high 8.5 CVSS 3.1

AV N AC H PR L UI N S C C H I H A H

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2.
The premise of this attack is that the attacker has obtained the account and password. Otherwise, the attacker cannot perform this attack.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	shardingsphere_elasticjob-ui	< 3.0.2	3.0.2
apache_software_foundation	apache_shardingsphere_elasticjob-ui	3.0.0 – 3.0.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-913