You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@linkis.apache.org by Heping Wang <pe...@apache.org> on 2023/04/10 06:14:41 UTC

CVE-2023-27603: Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue

Severity: important

Description:

In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a Zip Slip issue, which will lead to a potential RCE vulnerability.


We recommend users upgrade the version of Linkis to version 1.3.2.

Credit:

4ra1n (reporter)

References:

https://linkis.apache.org
https://www.cve.org/CVERecord?id=CVE-2023-27603


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org
For additional commands, e-mail: dev-help@linkis.apache.org