CVE-2022-23221

CRITICAL LAB

H2 Console <2.1.210 - RCE

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-23221. PoCs published by straightSang.

AI-analyzed exploit summary This repository contains a functional PoC for CVE-2022-23221, a remote code execution vulnerability in H2 Database versions prior to 2.1.210. The exploit leverages a malicious JDBC URL with an INIT script parameter to execute arbitrary SQL commands, including Java code via CREATE ALIAS, achieving RCE.

Description

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

Exploits (1)

nomisec WORKING POC

by straightSang · poc

https://github.com/straightSang/H2-database-CVE-2022-23221

View Code ZIP pw:eip

This repository contains a functional PoC for CVE-2022-23221, a remote code execution vulnerability in H2 Database versions prior to 2.1.210. The exploit leverages a malicious JDBC URL with an INIT script parameter to execute arbitrary SQL commands, including Java code via CREATE ALIAS, achieving RCE.

Classification

Working Poc 98%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: H2 Database 2.0.206

No auth needed

Prerequisites: Network access to the H2 Database TCP port (9092) · H2 Database running a vulnerable version (2.0.206 or earlier) · Ability to host a malicious SQL script (e.g., via HTTP server)

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

mistral-large-3 · analyzed Jul 09, 2026 Full analysis →