Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.hive:hive-jdbc

3 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 medium
Registry
Maven Central

Advisories 3

  • CVE-2023-35701Medium 6.6

    Apache Hive: Arbitrary command execution via JDBC driver

    Affected: from 4.0.0-alpha-1, fixed in 4.0.0; from 4.0.0-alpha-1, fixed in 4.0.0.

  • In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved entities in a…

    Affected: fixed in 2.3.4; from 3.0.0, fixed in 3.1.1.

  • This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument…

    Affected: from 0.7.1, fixed in 2.3.3.