Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.linkis:linkis-datasource

4 known vulnerabilities (1 critical, 2 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 critical, 2 high, 1 medium
Registry
Maven Central

Advisories 4

  • Apache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability

    Affected: fixed in 1.6.0.

  • Apache Linkis DataSource: DataSource Remote code execution vulnerability

    Affected: from 1.4.0, fixed in 1.6.0.

  • CVE-2023-41916Medium 6.5

    Apache Linkis DataSource: DatasourceManager module has a JDBC parameter judgment logic vulnerability that allows for arbitrary file reading

    Affected: from 1.4.0, fixed in 1.6.0.

  • CVE-2023-29216Critical 9.8

    Apache Linkis DatasourceManager module has a deserialization command execution

    Affected: fixed in 1.3.2.