Security Advisory

CVE-2018-1282

9.1
CRITICAL

Vulnerability Description

This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation.
Published Date April 5, 2018
Official Source NIST NVD Advisory