openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: JNDI)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: JNDI). Supported versions that areaffected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; OracleGraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitablevulnerability allows unauthenticated attacker with network access viamultiple protocols to compromise Oracle Java SE, Oracle GraalVM EnterpriseEdition. Successful attacks of this vulnerability can result inunauthorized update, insert or delete access to some of Oracle Java SE,Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerabilityapplies to Java deployments, typically in clients running sandboxed JavaWeb Start applications or sandboxed Java applets, that load and rununtrusted code (e.g., code that comes from the internet) and rely on theJava sandbox for security. This vulnerability can also be exploited byusing APIs in the specified Component, e.g., through a web service whichsupplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts).CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).

Where it's fixed