Details
Description
When the server requests a local file (LOAD DATA/XML LOCAL INFILE), the connector validates that the requested filename matches the one in the client's SQL statement, so a rogue or man-in-the-middle server cannot request an arbitrary file.
That validation compared the filename case-insensitively. On case-sensitive filesystems (Linux), a path differing only in case is a distinct file, so the check was slightly looser than the actual filesystem semantics.
from https://github.com/mariadb-corporation/mariadb-connector-j/pull/225