Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.linkis:linkis

10 known vulnerabilities (3 critical, 4 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
10 · 3 critical, 4 high, 3 medium
Dependents
0
Registry
Maven Central

Advisories 10

  • Apache Linkis: Arbitrary File Read via Double URL Encoding Bypass

    Affected: from 1.3.0, fixed in 1.8.0.

  • CVE-2024-27182Medium 4.9

    Apache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerability

    Affected: fixed in 1.6.0.

  • Apache Linkis Basic management services: Privilege Escalation Attack vulnerability

    Affected: fixed in 1.6.0.

  • CVE-2023-50740Medium 5.3

    Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

    Affected: fixed in 1.5.0.

  • CVE-2023-27987Critical 9.1

    Apache Linkis gateway module token authentication bypass

    Affected: fixed in 1.3.2.

  • CVE-2023-27603Critical 9.8

    Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue

    Affected: fixed in 1.3.2.

  • CVE-2023-27602Critical 9.8

    Apache Linkis publicsercice module unrestricted upload of file

    Affected: fixed in 1.3.2.

  • CVE-2022-44644Medium 6.5

    Apache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability

    Affected: fixed in 1.3.1.

  • Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability

    Affected: fixed in 1.3.1.

  • The Apache Linkis JDBC EngineConn module has a RCE Vulnerability

    Affected: fixed in 1.3.0.