Vulnerability · Published Feb 6, 2025 · Assigned by apache

CVE-2022-31764Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC

High 8.5

In plain English

A high-severity security flaw in Apache ShardingSphere ElasticJob-UI from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)8.5High

Exploit odds (30 days)0.7%top 47.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of this attack is that the attacker has obtained the account and password. Otherwise, the attacker cannot perform this attack.

Affected products (as reported)

Vendor	Product	Versions
Apache Software Foundation	Apache ShardingSphere ElasticJob-UI	3.0.0 – through 3.0.1

Weakness: CWE-913 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References

https://lists.apache.org/thread/pg0k223m4hsnnzg4nh7lxvdxxgbkrlqb vendor-advisory