| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.linkis:linkis-datasource | < 1.3.2 | 1.3.2 |
| linkis | ≤ 1.3.1 |
In Apache Linkis <=1.3.1, because the parameters are not effectively filtered, the attacker can use the MySQL data source and malicious parameters to configure a new data source to trigger a deserialization vulnerability, eventually leading to remote code execution. Users should upgrade their version of Linkis to version 1.3.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free