| Package | Affected versions | Patched versions |
|---|---|---|
| com.h2database:h2 | < 2.1.210 | 2.1.210 |
| h2 | ≥ 1.1.100, < 2.0.206 | 2.0.206 |
| communications cloud native core console | = 1.9.0 |
H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free