Description
In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file.
Remediation
References
http://db.apache.org/derby/releases/release-10.6.2.1.html#Note+for+DERBY-2925
http://www.securityfocus.com/bid/101562
https://issues.apache.org/jira/browse/DERBY-2925
Related Vulnerabilities
CVE-2023-34053 Vulnerability in maven package org.springframework:spring-web
CVE-2023-32998 Vulnerability in maven package com.rapid7:jenkinsci-appspider-plugin
CVE-2023-37951 Vulnerability in maven package com.mabl.integration.jenkins:mabl-integration
CVE-2014-3599 Vulnerability in maven package org.hornetq.rest:hornetq-rest