com.mydataharbor:jdbc-hive-2.2.x-plugin (>=1.1.1, <=2.0.2), com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics (>=1.1.0, <=1.2.2) +43 more potentially affected by CVE-2018-1315 via org.apache.hive:hive-service (>=2.1.0, <=2.3.2)

org.apache.hive:hive-service MAVEN version =2.1.0, =1.1.1, =1.1.0, =5.1.0, =1.15.4, =0.9.1, =0.8.4, =0.8.3, =0.8.3, =0.8.3, =0.8.3, =1.2.0, =2.0.1, =1.2.0, =1.2.0, =3.0.6 and more Source cves: CVE-2018-1315 Source advisory: OSV:GHSA-P639-XXV5-J383...

com.hindog.grid:grid-executor-examples_2.11 (>=1.1.0, <=2.0.1) potentially affected by CVE-2018-1315 via org.apache.hive:hive (2.1.1)

org.apache.hive:hive MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive and may be impacted: - com.hindog.grid:grid-executor-examples2.11 =1.1.0, =2.0.1 Source cves: CVE-2018-1315 Source advisory:...

com.hindog.grid:grid-executor-examples_2.11 (>=1.1.0, <=2.0.1) potentially affected by CVE-2018-1315 via org.apache.hive:hive (2.1.1)

org.apache.hive:hive MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive and may be impacted: - com.hindog.grid:grid-executor-examples2.11 =1.1.0, =2.0.1 Source cves: CVE-2018-1315 Source advisory: GHSA-P639-XXV5-J3...

com.amazon.emr:hive2-shims (>=5.0.0, <=5.6.0), com.dtstack:dt-insight-hive-shade (>=4.1.2-release, <=4.1.3) +18 more potentially affected by CVE-2018-1315 via org.apache.hive:hive-exec (>=2.1.0, <=2.3.2)

org.apache.hive:hive-exec MAVEN version =2.1.0, =5.0.0, =4.1.2-release, =5.6.0, =1.13.0, =0.12.0, =0.9.0, =0.14.0, =0.14.0, =0.9.0, =0.14.0, =1.0.0-beta1 and more Source cves: CVE-2018-1315 Source advisory: OSV:GHSA-P639-XXV5-J383...

com.amazon.emr:hive2-shims (>=5.0.0, <=5.6.0), com.dtstack:dt-insight-hive-shade (>=4.1.2-release, <=4.1.3) +18 more potentially affected by CVE-2018-1315 via org.apache.hive:hive-exec (>=2.1.0, <=2.3.2)

org.apache.hive:hive-exec MAVEN version =2.1.0, =5.0.0, =4.1.2-release, =5.6.0, =1.13.0, =0.12.0, =0.9.0, =0.14.0, =0.14.0, =0.9.0, =0.14.0, =1.0.0-beta1 and more Source cves: CVE-2018-1315 Source advisory: GHSA-P639-XXV5-J383...

com.mydataharbor:jdbc-hive-2.2.x-plugin (>=1.1.1, <=2.0.2), com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics (>=1.1.0, <=1.2.2) +43 more potentially affected by CVE-2018-1315 via org.apache.hive:hive-service (>=2.1.0, <=2.3.2)

org.apache.hive:hive-service MAVEN version =2.1.0, =1.1.1, =1.1.0, =5.1.0, =1.15.4, =0.9.1, =0.8.4, =0.8.3, =0.8.3, =0.8.3, =0.8.3, =1.2.0, =2.0.1, =1.2.0, =1.2.0, =3.0.6 and more Source cves: CVE-2018-1315 Source advisory: MEND:CVE-2018-1315...

CVE-2018-1315

CVE-2018-1315 affects Apache Hive 2.1.0–2.3.2 when using the HPL/SQL extension and issuing COPY FROM FTP. The FTP client does not verify the destination path, allowing a compromised FTP server to cause the downloaded file to be written to an arbitrary location on the cluster where the command is ...

com.amazon.emr:hive2-shims (>=5.0.0, <=5.6.0), com.dtstack:dt-insight-hive-shade (>=4.1.2-release, <=4.1.3) +18 more potentially affected by CVE-2018-1315 via org.apache.hive:hive-exec (>=2.1.0, <=2.3.2)

org.apache.hive:hive-exec MAVEN version =2.1.0, =5.0.0, =4.1.2-release, =5.6.0, =1.13.0, =0.12.0, =0.9.0, =0.14.0, =0.14.0, =0.9.0, =0.14.0, =1.0.0-beta1 and more Source cves: CVE-2018-1315 Source advisory: MEND:CVE-2018-1315...