CVE-2022-31764

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of this attack is that the attacker has obtained the account and password. Otherwise, the attacker cannot perform this attack.

• CWE-913

• https://lists.apache.org/thread/pg0k223m4hsnnzg4nh7lxvdxxgbkrlqbMailing List

Published

Feb 6, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31759AppLink has a vulnerability of accessing uninitialized point…5.5
• CVE-2022-3176There exists a use-after-free in io_uring in the Linux kerne…7.8
• CVE-2022-31760Dialog boxes can still be displayed even if the screen is lo…9.1
• CVE-2022-31761Configuration defects in the secure OS module. Successful ex…7.5
• CVE-2022-31762The AMS module has a vulnerability in input validation. Succ…7.8
• CVE-2022-31763The kernel module has the null pointer and out-of-bounds arr…5.5
• CVE-2022-31765Affected devices do not properly authorize the change passwo…8.8
• CVE-2022-31766A vulnerability has been identified in RUGGEDCOM RM1224 LTE(…8.6
• CVE-2022-31767IBM CICS TX Standard and Advanced 11.1 could allow a remote …9.8
• CVE-2022-31768IBM InfoSphere Information Server 11.7 is vulnerable to SQL …9.8
• CVE-2022-31769IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 c…5.3
• CVE-2022-31770IBM App Connect Enterprise Certified Container 4.2 could all…4.9