CyberRota Analysis
AI-GeneratedHeimdall Data Database Proxy installations are vulnerable to a directory traversal flaw in the uploadJar method, allowing authenticated remote attackers to execute arbitrary code with root privileges. This high-severity vulnerability arises from inadequate validation of user-supplied paths during file operations. Organizations using this database proxy should prioritize immediate remediation to mitigate the risk of unauthorized code execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Authentication is required to exploit this vulnerability. The specific flaw exists within the uploadJar method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-28603.