High · 7.5 CVE-2010-2232 EUVD-2022-5837GHSA-xprw-xvvm-vqmv

Improper Access Control in Apache Derby

Published Oct 23, 2017 · Updated Aug 7, 2024 · Assigned by apache

Description

In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file.

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache Derby	10.1.2.1, 10.2.2.0, 10.3.1.4, 10.4.1.3	—

Ecosystem	Package	Affected	Fixed	Record
Maven	org.apache.derby:derby	>= 10.1.2.1, < 10.4.2.0	10.4.2.0	GHSA-xprw-xvvm-vqmv