CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-32697
Critical (9.8) in sqlite jdbc project sqlite jdbc. EPSS 1.6% chance of exploitation in the next 30 days. Fixed in org.xerial:sqlite-jdbc 3.41.2.2.
SQLite JDBC is a library for accessing and creating SQLite database files in Java. Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. This issue impacting versions 3.6.14.1 through 3.41.2.1 and has been fixed in version 3.41.2.2.
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sqlite_jdbc_project:sqlite_jdbc
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6phf-6h5g-97j2 | Maven | org.xerial:sqlite-jdbc | >=3.6.14.1 <3.41.2.2 | 3.41.2.2 |