You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@linkis.apache.org by Heping Wang <pe...@apache.org> on 2024/08/02 03:50:11 UTC
CVE-2024-27182: Apache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerability
Severity: important
Affected versions:
- Apache Linkis Basic management services 1.3.2 before 1.6.0
Description:
In Apache Linkis <= 1.5.0,
Arbitrary file deletion in Basic management services on
A user with an administrator account could delete any file accessible by the Linkis system user
.
Users are recommended to upgrade to version 1.6.0, which fixes this issue.
Credit:
superx (reporter)
References:
https://linkis.apache.org
https://www.cve.org/CVERecord?id=CVE-2024-27182
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org
For additional commands, e-mail: dev-help@linkis.apache.org