Apache Gravitino < 1.2.1 - Unauthenticated Remote Code Execution
Apache Gravitino < 1.2.1 contains a remote code execution caused by unsanitized H2 JDBC URL via testConnection API using H2's INIT parameter, letting unauthenticated attackers execute arbitrary Java code remotely, exploit requires H2 usage.
CVSS9.1EPSS 1.5%