In short
- CVE-2024-36263 is a HIGH (CVSS 8.1) vulnerability affecting org.apache.submarine:submarine-server-core.
- Chance of exploitation in the next 30 days (EPSS): 0.96%, higher than 61.8% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Submarine Server Core.
This issue affects Apache Submarine Server Core: all versions.
As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
NVD description
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Submarine Server Core.
This issue affects Apache Submarine Server Core: all versions.
As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
More vulnerabilities in org.apache.submarine:submarine-server-core
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free