cve.bz

CVE-2023-45860

6.5 mediumEPSS 0.5%

Medium (6.5) in hazelcast hazelcast. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in com.hazelcast:hazelcast 5.2.5, 5.3.5.

In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE
CWE-89
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-8h4x-xvjp-vf99Mavencom.hazelcast:hazelcast>=5.3.0 <5.3.55.3.5
GHSA-8h4x-xvjp-vf99Mavencom.hazelcast:hazelcast-enterprise>=5.3.0 <5.3.55.3.5
GHSA-8h4x-xvjp-vf99Mavencom.hazelcast:hazelcast-enterprise>=5.2.0 <5.2.55.2.5
GHSA-8h4x-xvjp-vf99Mavencom.hazelcast:hazelcast-enterprise<=5.1.7no fix published
GHSA-8h4x-xvjp-vf99Mavencom.hazelcast:hazelcast>=5.2.0 <5.2.55.2.5
GHSA-8h4x-xvjp-vf99Mavencom.hazelcast:hazelcast<=5.1.7no fix published

References

Check your stackJSON