Advisories · Technology
Apache Software Foundation Apache SIS.
Every CVE that names Apache Software Foundation Apache SIS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.5 Medium
Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files
- Apache Software Foundation Apache SIS
- Path traversal
- CVSS 5.4 Medium
Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature store
- Apache Software Foundation Apache SIS
- SQL injection