Lucene search
GoogleOSV:GHSA-6GCH-63WP-4V5FHistorySep 25, 2024 - 3:30 a.m.
Apache Linkis Spark EngineConn: Commons Lang's RandomStringUtils Random string security vulnerability
2024-09-2503:30:35
Google
osv.dev
apache linkis
spark engineconn
commons lang's
randomstringutils
security vulnerability
upgrade to version 1.6.0
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
High
In Apache Linkis <= 1.5.0, a Random string security vulnerability in Spark EngineConn, random string generated by the Token when starting Py4j uses the Commons Lang’s RandomStringUtils.
Users are recommended to upgrade to version 1.6.0, which fixes this issue.
Related
nvd
nvd
CVE-2024-39928
2024-09-25 01:15:40
cve
cve
CVE-2024-39928
2024-09-25 01:15:40
cvelist
cvelist
vulnrichment
vulnrichment
github
github
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
High
Related for OSV:GHSA-6GCH-63WP-4V5F