Apache Linkis Code Execution Vulnerability (CNVD-2023-80566)

Apache Linkis is a library of the U.S. Apache (Apache) Foundation. Helps to easily connect various backend compute/storage engines. A code execution vulnerability exists in Apache Linkis 1.3.1 and earlier versions, which stems from a lack of valid filtered parameters, and can be exploited by an attacker to configure malicious Mysql JDBC parameters in the JDBC EengineConn module, leading to remote code execution.