GitHub Advisoryadvisory · Maven

GHSA-jjvc-v8gw-5255 Apache Linkis DataSource remote code execution vulnerability

HIGH Published 2024-07-15 Modified 2024-07-15 Official page ↗

Aliases: CVE-2023-46801
Ecosystem: Maven
Packages: org.apache.linkis:linkis-datasource
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-502
Reviewed: 2024-07-15

Affected packages

• Maven org.apache.linkis:linkis-datasource: >= 1.4.0, < 1.6.0 → fixed in 1.6.0

Description

In Apache Linkis = 1.8.0_241. Or users upgrade Linkis to version 1.6.0.

Related

Alias · CVE (1)

CVE-2023-46801 In Apache Linkis <= 1.5.0, data source management module, when adding Mysql data source, exists remote code execution vulnerability for… vulnerability

Weakness · CWE (1)

CWE-502 Deserialization of Untrusted Data weakness

References