zhutougg/c3p0

Releases61

Frequency3 weeks 16 hours

Last Release over 10 years ago

a mature, highly concurrent JDBC Connection pooling library, with support for caching and reuse of PreparedStatements.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-20433 ↗	Dec 24, 2018Monday, 24 December 2018, 13:29	—	7.5 HIGH
c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization.