VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Mar 1, 2021· Updated Jun 17, 2026

CVE-2020-9479

CVE-2020-9479

Description

When loading a UDF, a specially crafted zip file could allow files to be placed outside of the UDF deployment directory. This issue affected Apache AsterixDB unreleased builds between commits 580b81aa5e8888b8e1b0620521a1c9680e54df73 and 28c0ee84f1387ab5d0659e9e822f4e3923ddc22d. Note: this CVE may be REJECTed as the issue did not affect any released versions of Apache AsterixDB

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Apache/AsterixDBllm-fuzzy3 versions
    unreleased builds between commits 580b81aa5e8888b8e1b0620521a1c9680e54df73 and 28c0ee84f1387ab5d0659e9e822f4e3923ddc22d+ 2 more
    • (no CPE)range: unreleased builds between commits 580b81aa5e8888b8e1b0620521a1c9680e54df73 and 28c0ee84f1387ab5d0659e9e822f4e3923ddc22d
    • cpe:2.3:a:apache:asterixdb:*:*:*:*:*:*:*:*range: <0.9.5
    • (no CPE)range: Apache AsterixDB git

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.