| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.hive:hive-jdbc | ≥ 0.7.1, < 2.3.3 | 2.3.3 |
| hive | ≥ 0.7.1, ≤ 2.3.2 |
This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free