The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include…
apache·CWE-347·Published 2020-03-30