CVE-2021-42392

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various attack vectors, most notably through the H2 Console which leads to unauthenticated remote code execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
Jan 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-42405.3A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of theCVE-2021-42415.3A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psCVE-2021-42428.8A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical. Affected by this issue is some unknown funcCVE-2021-42446.1A vulnerability classified as problematic has been found in yikes-inc-easy-mailchimp-extender Plugin up to 6.8.5. This affects an unknown paCVE-2021-42459.8A vulnerability classified as problematic has been found in chbrown rfc6902. This affects an unknown part of the file pointer.ts. The manipuCVE-2021-42469.8A vulnerability was found in roxlukas LMeve and classified as critical. Affected by this issue is some unknown functionality of the componenCVE-2021-42477.5A vulnerability has been found in OWASP NodeGoat and classified as problematic. This vulnerability affects unknown code of the file app/routCVE-2021-42489.8A vulnerability was found in kapetan dns up to 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionalityCVE-2021-42497.5A vulnerability was found in xml-conduit. It has been classified as problematic. Affected is an unknown function of the file xml-conduit/srcCVE-2021-42507.5A vulnerability classified as problematic has been found in cgriego active_attr up to 0.15.2. This affects the function call of the file libCVE-2021-42516.1A vulnerability classified as problematic was found in as. This vulnerability affects the function getFullURL of the file include.cdn.php. TCVE-2021-42526.1A vulnerability, which was classified as problematic, has been found in WP-Ban. This issue affects the function toggle_checkbox of the file
CVE-2021-42392: Critical severity, CVSS 9.8 | Vulnix