Lucene search

K
osvGoogleOSV:CVE-2018-14335
HistoryJul 24, 2018 - 1:29 p.m.

CVE-2018-14335

2018-07-2413:29:00
Google
osv.dev
11

AI Score

6.3

Confidence

Low

EPSS

0.017

Percentile

88.0%

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.