Vulnerability GHSA-7ph3-grqh-pv9v
Medium Risk
MEDIUM RISK
CVSS Score: 5.4
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
4 months ago
June 30, 2026 at 03:30 PM UTC
Apache Gravitino JDBC configuration validation bypass can allow file reads or truncation
0.6.0-incubating - 0.7.0-incubating
0.6.0-incubating - 0.7.0-incubating
Summary
Apache Gravitino JDBC configuration validation bypass can allow file reads or truncation
Details
SQL misconfiguration in the Gravitino UI, in versions 0.5.0 until 1.0.0, can allow a malicious user to read or truncate files. Users are recommended to upgrade to version 1.0.0, which fixes this issue.
Impacted packages
Timeline
Published
4 months ago
June 30, 2026 at 03:30 PM UTC
Last Modified
13 hours ago
November 05, 2026 at 06:15 PM UTC