Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-01778
HistoryOct 14, 2021 - 12:00 a.m.

Apache DB DdlUtils code issue vulnerability

2021-10-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.218 Low

EPSS

Percentile

96.5%

Apache DB DdlUtils is a small, easy-to-use component from the Apache Foundation for working with database definition (DDL) files.A code issue vulnerability exists in Apache DB DdlUtils 1.0, which stems from an insecure BinaryObjectsHelper class that uses ObjectInputStream.readObject when failing to verify that input data can be safely deserialized. An attacker could exploit the vulnerability to cause remote code execution.

CPENameOperatorVersion
apache apache db ddlutilseq1.0

0.218 Low

EPSS

Percentile

96.5%