Apache Griffin Hive Metastore Module
Monthly
SQL injection in Apache Griffin's Hive Metastore Module exposes all versions of this retired data quality platform to authenticated network exploitation. Low-privileged users can inject arbitrary SQL into Hive Metastore queries, achieving full confidentiality, integrity, and availability compromise of the underlying metadata store. Critically, the Apache Software Foundation has officially retired this project and will not release a patch, leaving deployments permanently unmitigated at the software level.
SQL injection in Apache Griffin's Hive Metastore Module exposes all versions of this retired data quality platform to authenticated network exploitation. Low-privileged users can inject arbitrary SQL into Hive Metastore queries, achieving full confidentiality, integrity, and availability compromise of the underlying metadata store. Critically, the Apache Software Foundation has officially retired this project and will not release a patch, leaving deployments permanently unmitigated at the software level.