Apache Linkis vulnerable to privilege escalation

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-27181 · ADVISORY
• apache/linkis · PACKAGE
• lists.apache.org/thread/hosd73l7hxb3rpt5rb0yg0ld11zph4c6 · WEB
• openwall.com/lists/oss-security/2024/08/02/3 · WEB
• openwall.com/lists/oss-security/2024/08/02/3 · Mailing List

More vulnerabilities in org.apache.linkis:linkis

• CVE-2025-29847HIGH 7.5A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC engine and data source function…
• CVE-2024-27182MEDIUM 4.9In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator account could delete any …
• CVE-2023-50740MEDIUM 5.3In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module.  We recomme…
• CVE-2023-27987CRITICAL 9.1 In Apache Linkis <=1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy for attackers to obt…
• CVE-2023-27603CRITICAL 9.8 In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a Zip Slip issue, whi…