Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-50740 · ADVISORY
• apache/linkis commit 08cbcfc · WEB
• apache/linkis · PACKAGE
• lists.apache.org/thread/5o342chnpyd6rps68ygzfkzycxl998yo · WEB
• openwall.com/lists/oss-security/2024/03/06/2 · WEB

org.apache.linkis:linkis のその他の脆弱性

• CVE-2025-29847高 7.5A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC engine and data source function…
• CVE-2024-27182中 4.9In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator account could delete any …
• CVE-2024-27181高 8.8In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted account allows acces…
• CVE-2023-27987緊急 9.1 In Apache Linkis <=1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy for attackers to obt…
• CVE-2023-27603緊急 9.8 In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a Zip Slip issue, whi…