Description

In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file.

Remediation

References

http://db.apache.org/derby/releases/release-10.6.2.1.html#Note+for+DERBY-2925

http://www.securityfocus.com/bid/101562

https://issues.apache.org/jira/browse/DERBY-2925

Related Vulnerabilities

CVE-2023-30543 Vulnerability in npm package @web3-react/eip1193

CVE-2021-44906 Vulnerability in npm package minimist

CVE-2021-41109 Vulnerability in npm package parse-server

CVE-2023-27987 Vulnerability in maven package org.apache.linkis:linkis-dist

CVE-2023-46133 Vulnerability in npm package crypto-es

Severity

High

Classification

CWE-284 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Issue Tracking Patch Vendor Advisory Release Notes