Database Proxy
Monthly
Remote code execution in Heimdall Data Database Proxy enables authenticated high-privilege attackers to run arbitrary code as root via a directory traversal flaw in the uploadJar method. The vulnerability, tracked as ZDI-CAN-28603 and published by Zero Day Initiative as ZDI-26-479, stems from the absence of proper path validation on user-supplied input before use in file operations, allowing arbitrary JAR placement on the underlying filesystem. No public exploit code and no CISA KEV listing are identified at time of analysis; exploitation is gated behind administrative authentication.
Remote code execution in Heimdall Data Database Proxy lets an authenticated, high-privileged attacker inject CRLF sequences into the generateFileContent function to run arbitrary commands as root (ZDI-26-447, formerly ZDI-CAN-29251). The flaw carries a CVSS 7.2 (PR:H) rating and was reported through the Zero Day Initiative; no public exploit identified at time of analysis and it is not on CISA KEV, so exploitation risk is currently theoretical but the root-level impact is severe.
Remote code execution in Heimdall Data Database Proxy enables authenticated high-privilege attackers to run arbitrary code as root via a directory traversal flaw in the uploadJar method. The vulnerability, tracked as ZDI-CAN-28603 and published by Zero Day Initiative as ZDI-26-479, stems from the absence of proper path validation on user-supplied input before use in file operations, allowing arbitrary JAR placement on the underlying filesystem. No public exploit code and no CISA KEV listing are identified at time of analysis; exploitation is gated behind administrative authentication.
Remote code execution in Heimdall Data Database Proxy lets an authenticated, high-privileged attacker inject CRLF sequences into the generateFileContent function to run arbitrary commands as root (ZDI-26-447, formerly ZDI-CAN-29251). The flaw carries a CVSS 7.2 (PR:H) rating and was reported through the Zero Day Initiative; no public exploit identified at time of analysis and it is not on CISA KEV, so exploitation risk is currently theoretical but the root-level impact is severe.