Description

In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file.

Remediation

References

https://issues.apache.org/jira/browse/DERBY-2925

http://db.apache.org/derby/releases/release-10.6.2.1.html#Note+for+DERBY-2925

http://www.securityfocus.com/bid/101562

Related Vulnerabilities

CVE-2020-26238 Vulnerability in maven package com.cronutils:cron-utils

CVE-2022-24999 Vulnerability in npm package qs

CVE-2016-5388 Vulnerability in maven package org.apache.tomcat:tomcat-catalina

CVE-2021-4245 Vulnerability in maven package org.webjars.npm:rfc6902

CVE-2018-25053 Vulnerability in npm package node-json2html

Severity

High

Classification

CWE-284 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Release Notes Patch Vendor Advisory Issue Tracking