Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-50740 · ADVISORY
• apache/linkis commit 08cbcfc · WEB
• apache/linkis · PACKAGE
• lists.apache.org/thread/5o342chnpyd6rps68ygzfkzycxl998yo · WEB
• openwall.com/lists/oss-security/2024/03/06/2 · WEB

More vulnerabilities in org.apache.linkis:linkis

• CVE-2025-29847HIGH 7.5A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC engine and data source function…
• CVE-2024-27182MEDIUM 4.9In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator account could delete any …
• CVE-2024-27181HIGH 8.8In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted account allows acces…
• CVE-2023-27987CRITICAL 9.1 In Apache Linkis <=1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy for attackers to obt…
• CVE-2023-27603CRITICAL 9.8 In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a Zip Slip issue, whi…