~ / search / GHSA-xprw-xvvm-vqmv

GHSA-xprw-xvvm-vqmv

Improper Access Control in Apache Derby

Source: GitHub Advisory Database (reviewed) High CVE-2010-2232

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.derby:derby >= 10.1.2.1, < 10.4.2.0 10.4.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file.

References

External links from the advisory. They lead to third-party sites.