Description
Chat2DB H2数据库的最新驱动存在安全漏洞，如果连接字符串可控，攻击者可以利用该漏洞执行任意命令获取服务器权限
Chat2DB H2 JDBC 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/chat2db/Chat2DB/issues/370
https://avd.aliyun.com/detail?id=AVD-2023-1678173
https://www.leavesongs.com/PENETRATION/talk-about-h2database-rce.html
https://rivers.chaitin.cn/blog/cq9k4ch0lnechd245jbg
https://www.cnblogs.com/cwkiller/p/18957721