Skip to content
OpenAdvisories

Package · Maven

com.facebook.presto:presto-jdbc

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    GHSA-86q5-qcjc-7pv4

    Presto JDBC Server-Side Request Forgery by nextUri

    ### Summary Presto JDBC is vulnerable to Server-Side Request Forgery (SSRF) when connecting a remote Presto server. An attacker can modify the nextUri parameter to internal server in response content that Presto JDBC client will request next and view sensitiv…

    com.facebook.presto:presto-jdbc Maven
  • High 7.6
    GHSA-xm7x-f3w2-4hjm

    Presto JDBC Server-Side Request Forgery by redirect

    ### Summary Presto JDBC is vulnerable to Server-Side Request Forgery (SSRF) when connecting a remote Presto server. An attacker can construct a redirect response that Presto JDBC client will follow and view sensitive information from highly sensitive internal…

    com.facebook.presto:presto-jdbc Maven