c3p0 vulnerabilities (Ubuntu)
6 vulnerabilities.
-
c3p0Ubuntu mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets" 7.1 High -
c3p0Ubuntu c3p0 exposes a deserialization "sink" via JDBC DataSource bean properties 6.3 Medium -
c3p0Ubuntu c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property 8.9 High -
c3p0Ubuntu mchange-commons-java: Remote Code Execution via JNDI Reference Resolution 8.9 High -
c3p0Ubuntu Billion laughs attack in c3p0 7.5 High -
c3p0Ubuntu XML External Entity Reference in mchange:c3p0 9.8 Critical