CVE-2020-9479

CVE-2020-9479 affects Apache AsterixDB (unreleased builds) during loading of a UDF. A specially crafted ZIP can cause files to be placed outside the UDF deployment directory, indicating a directory traversal flaw in the UDF load process. Impact details are limited to the described commodity: no r...