Apache Linkis DataSource vulnerabilities

2 known vulnerabilities in Apache Linkis DataSource from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Apache Linkis DataSource: Deserialization of Untrusted Data

  CVE-2023-49566Jul 15, 2024Apache

  In Apache Linkis <=1.5.0, due to the lack of effective filtering of parameters, an attacker configuring malicious db2 parameters in the DataSource Manager Module will result in jndi injection. Therefore, the parameters in the DB2 URL should be blacklisted. Thi

• 8.8 High severity

  Apache Linkis DataSource: Deserialization of Untrusted Data

  CVE-2023-46801Jul 15, 2024ApacheEPSS 1.23%

  In Apache Linkis <= 1.5.0, data source management module, when adding Mysql data source, exists remote code execution vulnerability for java version < 1.8.0_241. The deserialization vulnerability exploited through jrmp can inject malicious files into the serve