description: This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation.
problem types: SQL Injection
affected:
{
product: Apache Hive
vendor: Apache Software Foundation
versions:
status: affected, version: 0.7.1 to 2.3.2
}