Skip to content
Threat Feed
Subscribe

Product

OpenGauss-Connector-Jdbc (>= 1.1.0, <= 6.0.6; 7.0.0-RC1, 7.0.0-RC2, 7.0.0-RC3)

1 brief RSS
high advisory

Arbitrary Class Instantiation in openGauss-connector-jdbc

A vulnerability in the LogFactory component of openGauss-connector-jdbc allows attackers to trigger arbitrary class instantiation via reflection by controlling JDBC logger class parameters.

openGauss-connector-jdbc vulnerability deserialization remote-code-execution
1t 1c