CVE:CVE-2022-23221
CNNVD:CNNVD-202201-1749
H2Console是一个用 Java 编写的可嵌入 RDBMS。
H2Console 2.1.210之前版本存在参数注入漏洞，攻击者可利用该漏洞通过精心构建的命令在系统上执行任意代码。
solution:Upgrade h2database h2 to a higher version than 2.0.206,and avoid the version [1.1.100,2.0.206); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade oracle communications_cloud_native_core_console to a higher version than 1.9.0,and avoid the version 1.9.0