- Synchronized data.

2010/2xxx/CVE-2010-2232.json

@@ -44,7 +44,7 @@
       "description_data" : [
          {
             "lang" : "eng",
-            "value" : "Due to security concerns and to avoid accidental file damage, Export processing will no longer overwrite an existing file. The application needs to specify a different filename which does not exists or delete the existing file before performing the Export operation."
+            "value" : "In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file."
          }
       ]
    },
@@ -64,6 +64,9 @@
       "reference_data" : [
          {
             "url" : "http://db.apache.org/derby/releases/release-10.6.2.1.html#Note+for+DERBY-2925"
+         },
+         {
+            "url" : "https://issues.apache.org/jira/browse/DERBY-2925"
          }
       ]
    }