Skip to content
OpenAdvisories

Package · Maven

com.databricks:databricks-jdbc

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    CVE-2024-49194

    Databricks JDBC Driver Command Injection vulnerability

    Databricks JDBC Driver 2.x before 2.6.40 could potentially allow remote code execution (RCE) by triggering a JNDI injection via a JDBC URL parameter. The vulnerability is rooted in the improper handling of the krbJAASFile parameter. An attacker could potentia…

    com.databricks:databricks-jdbc Maven