Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:opengauss:connector-Jdbc:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Arbitrary Class Instantiation in openGauss-connector-jdbc

A vulnerability in the LogFactory component of openGauss-connector-jdbc allows attackers to trigger arbitrary class instantiation via reflection by controlling JDBC logger class parameters.

openGauss-connector-jdbc vulnerability deserialization remote-code-execution
1t 1c