What is GHSA-v7cq-pq7v-mh5v?

GHSA-v7cq-pq7v-mh5v is a security advisory published by GitHub Security Advisories with Medium severity. Apache Derby SQL Injection

Which CVE IDs does GHSA-v7cq-pq7v-mh5v cover?

GHSA-v7cq-pq7v-mh5v covers the following CVE IDs: CVE-2006-7217. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-v7cq-pq7v-mh5v?

GHSA-v7cq-pq7v-mh5v affects 1 product, including: maven/org.apache.derby:derby:\u003c 10.2.1.6.

GHSA-v7cq-pq7v-mh5vMedium

Apache Derby SQL Injection

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

February 12, 2024

🔗 CVE IDs covered (1)

CVE-2006-7217 →

📋 Description

Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.

🎯 Affected products1

maven/org.apache.derby:derby:< 10.2.1.6

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2006-7217
http://db.apache.org/derby/releases/release-10.2.1.6.html
https://github.com/apache/derby/commit/28c633d82a776c90fd1cd835a0b66d1c8916d31a
https://svn.apache.org/viewvc?view=revision&revision=449869
https://web.archive.org/web/20090406213028/http://www.novell.com/linux/security/advisories/suse_security_summary_report.html
https://web.archive.org/web/20200301122517/https://issues.apache.org/jira/browse/DERBY-1858
https://github.com/advisories/GHSA-v7cq-pq7v-mh5v