Remote Code Execution (RCE)

2023-05-2503:20:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

remote code execution

sqlite-jdbc

jdbc url

vulnerability

injection

malicious code

EPSS

0.015

Percentile

87.0%

JSON

sqlite-jdbc is vulnerable to Remote Code Execution (RCE). The vulnerability exists because the extractResource function of SQLiteConnection.java does not properly validate the user input URL, which allows an attacker to inject and execute malicious code through the JDBC URL