Information Disclosure

2021-11-2204:28:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability disclosure

file system

path traversing

malicious user

EPSS

0.003

Percentile

71.4%

JSON

github.com/greenplum-db/gpdb/ is vulnerable to information disclosure. A malicious user can read/write information from the file system by path traversing, leading to information disclosure.

References

github.com/greenplum-db/gpdb/commit/a25b81d7d0a4dc15839ad28b7878f333b8ea4899

github.com/greenplum-db/gpdb/pull/11344

github.com/greenplum-db/gpdb/security/advisories/GHSA-hqh5-m87w-57w2

EPSS

0.003

Percentile

71.4%

JSON

Related for VERACODE:33040