Remote Code Execution in H2 Console JNDI - (CVE-2021-42392)

Update 1/11 - "What is the Status of Coverage" section updatedFortiGuard Labs is aware of newly discovered vulnerability in H2 Database software. The vulnerability is an unauthenticated remote code execution in the H2 database console and similar to Log4j, it is JNDI-based and has an exploit vector similar to it. This vulnerability has been assigned CVE-2021-42392 and was found by security researchers at JFrog. What is H2 Database?H2 is a relational database management system written in Java and is open …

code code execution cve cve-2021-42392 h2 jndi remote code execution