The vulnerability resides in the uploadJar method of Heimdall Data Database Proxy, arising from insufficient validation of a user-supplied path prior to file operations. It enables a remote attacker to traverse directories and write a malicious JAR file, which is then executed with elevated privileges. The result is arbitrary code execution in the context of the root user, compromising confidentiality, integrity, and availability of the affected system.

The affected product is Heimdall Data Database Proxy. Specific version information is not disclosed in the advisory.

The CVSS score of 7.2 signifies a high severity risk. Authentication is required, so the attacker must first gain user credentials or authentication tokens to reach the uploadJar endpoint. Because the EPSS score is 2% and the vulnerability is not listed in the CISA KEV catalog, the current exploitation probability is low. However, the directory traversal flaw provides a clear attack path: a remote user crafts a file path that escapes the intended directory, uploads a malicious JAR, and triggers execution as root.