{"id":"CVE-2024-27182","aliases":["EUVD-2024-2603","GHSA-j6vx-r77h-44wc"],"status":"published","title":"Apache Linkis  Basic management services: Engine material management Arbitrary file deletion vulnerability","description":"In Apache Linkis \u003c= 1.5.0,\n\nArbitrary file deletion in Basic management services on \n\nA user with an administrator account could delete any file accessible by the Linkis system user\n\n.\nUsers are recommended to upgrade to version 1.6.0, which fixes this issue.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00737,"percentile":0.54833,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-552"],"published":"2024-08-02T09:29:33Z","modified":"2026-11-08T10:45:10Z","fixes":[{"ecosystem":"Maven","package":"org.apache.linkis:linkis","fixed_in":["1.6.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.linkis:linkis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.apache.linkis:linkis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0"}]}],"versions":["1.0.3","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.3.0","1.3.1","1.3.2","1.4.0","1.5.0"]}],"products":[{"vendor":"apache","product":"linkis"},{"vendor":"apache software foundation","product":"apache linkis  basic management services"}],"references":[{"url":"https://lists.apache.org/thread/2of1p433h8rbq2bx525rtftnk19oz38h","tags":["vendor-advisory","Mailing List","Vendor Advisory","advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/08/02/4","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27182","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-j6vx-r77h-44wc"},{"url":"https://repo.maven.apache.org/maven2","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27182.json","tags":["advisory"]},{"url":"https://github.com/apache/linkis","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-27182","title":"Apache Linkis  Basic management services: Engine material management Arbitrary file deletion vulnerability","description":"In Apache Linkis \u003c= 1.5.0,\n\nArbitrary file deletion in Basic management services on \n\nA user with an administrator account could delete any file accessible by the Linkis system user\n\n.\nUsers are recommended to upgrade to version 1.6.0, which fixes this issue.","status":"published","published":"2024-08-02T09:29:33.391Z","modified":"2025-03-27T15:48:58.051Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:34:12.982241Z"}],"euvd":[{"id":"EUVD-2024-2603","description":"In Apache Linkis \u003c= 1.5.0,\n\nArbitrary file deletion in Basic management services on \n\nA user with an administrator account could delete any file accessible by the Linkis system user\n\n.\nUsers are recommended to upgrade to version 1.6.0, which fixes this issue.","status":"published","published":"2024-08-02T09:29:33Z","modified":"2025-03-27T15:48:58Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:49.499517Z"}],"ghsa":[{"id":"GHSA-j6vx-r77h-44wc","title":"Apache Linkis arbitrary file deletion vulnerability","description":"In Apache Linkis \u003c= 1.5.0, Arbitrary file deletion in Basic management services on a user with an administrator account could delete any file accessible by the Linkis system user. Users are recommended to upgrade to version 1.6.0, which fixes this issue.","status":"published","published":"2024-08-02T12:31:43Z","modified":"2025-03-27T23:33:58Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:38:36.51789Z"}],"nvd":[{"id":"CVE-2024-27182","description":"In Apache Linkis \u003c= 1.5.0,\n\nArbitrary file deletion in Basic management services on \n\nA user with an administrator account could delete any file accessible by the Linkis system user\n\n.\nUsers are recommended to upgrade to version 1.6.0, which fixes this issue.","status":"published","published":"2024-08-02T10:16:00.25Z","modified":"2026-06-17T07:19:23.01Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:10:15.933769Z"}],"osv":[{"id":"CVE-2024-27182","title":"Apache Linkis  Basic management services: Engine material management Arbitrary file deletion vulnerability","description":"In Apache Linkis \u003c= 1.5.0,\n\nArbitrary file deletion in Basic management services on \n\nA user with an administrator account could delete any file accessible by the Linkis system user\n\n.\nUsers are recommended to upgrade to version 1.6.0, which fixes this issue.","status":"published","published":"2024-08-02T09:29:33.391Z","modified":"2026-11-08T13:15:04.758904185Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-552"],"updated_at":"2026-11-08T11:04:08.386699Z"},{"id":"GHSA-j6vx-r77h-44wc","title":"Apache Linkis arbitrary file deletion vulnerability","description":"In Apache Linkis \u003c= 1.5.0, Arbitrary file deletion in Basic management services on a user with an administrator account could delete any file accessible by the Linkis system user. Users are recommended to upgrade to version 1.6.0, which fixes this issue.","status":"published","published":"2024-08-02T12:31:43Z","modified":"2025-03-27T23:42:05.820287Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"},{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T15:46:49.977351Z"}]}}