Apache Linkis vulnerabilities

• apache linkis Apache Linkis: Password Exposure CVE-2025-59355 Fix available 6.5 MediumJanuary 19, 2026
• apache linkis Apache Linkis: Arbitrary File Read via Double URL Encoding Bypass CVE-2025-29847 Fix available 7.5 HighJanuary 19, 2026
• apache linkis, apache software foundation linkis metadata query service jdbc +1 more Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability CVE-2024-45627 Fix available 5.9 MediumJanuary 14, 2025
• apache linkis, apache software foundation linkis spark engineconn +1 more Apache Linkis Spark EngineConn: Commons Lang's RandomStringUtils Random string security vulnerability CVE-2024-39928 Fix available 7.5 HighSeptember 24, 2024
• apache linkis, apache software foundation linkis basic management services +1 more Apache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerability CVE-2024-27182 Fix available 4.9 MediumAugust 2, 2024
• apache linkis, apache software foundation linkis basic management services +1 more Apache Linkis Basic management services: Privilege Escalation Attack vulnerability CVE-2024-27181 Fix available 8.8 HighAugust 2, 2024
• apache linkis, apache software foundation linkis datasource +1 more Apache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability CVE-2023-49566 Fix available 8.8 HighJuly 15, 2024
• apache linkis, apache software foundation linkis datasource +1 more Apache Linkis DataSource: DataSource Remote code execution vulnerability CVE-2023-46801 Fix available 8.8 HighJuly 15, 2024
• apache linkis, apache software foundation linkis datasource +1 more Apache Linkis DataSource: DatasourceManager module has a JDBC parameter judgment logic vulnerability that allows for arbitrary file reading CVE-2023-41916 Fix available 6.5 MediumJuly 15, 2024
• apache linkis, apache software foundation linkis datasource +1 more Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged CVE-2023-50740 Fix available 5.3 MediumMarch 6, 2024
• apache linkis Apache Linkis DatasourceManager module has a deserialization command execution CVE-2023-29216 Fix available 9.8 CriticalApril 10, 2023
• apache linkis Apache Linkis gateway module token authentication bypass CVE-2023-27987 Fix available 9.1 CriticalApril 10, 2023
• apache linkis Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue CVE-2023-27603 Fix available 9.8 CriticalApril 10, 2023
• apache linkis Apache Linkis publicsercice module unrestricted upload of file CVE-2023-27602 Fix available 9.8 CriticalApril 10, 2023
• apache linkis Apache Linkis JDBC EngineCon has a deserialization command execution CVE-2023-29215 Fix available 9.8 CriticalApril 10, 2023
• apache linkis, apache software foundation linkis (incubating) +1 more Apache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability CVE-2022-44644 Fix available 6.5 MediumJanuary 31, 2023
• apache linkis, apache software foundation linkis (incubating) +1 more Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability CVE-2022-44645 Fix available 8.8 HighJanuary 31, 2023
• apache linkis The Apache Linkis JDBC EngineConn module has a RCE Vulnerability CVE-2022-39944 Fix available 8.8 HighOctober 26, 2022