228 matches found
Apache Flink Arbitrary Jar Package Upload Leads to Remote Code Execution Vulnerability
Apache Flink is developed by the Apache Software Foundation open source stream processing framework , the core is written in Java and Scala distributed streaming data flow engine . Flink to data parallelism and pipelined execution of arbitrary streaming data program , Flink's pipeline runtime...
Command Execution Vulnerability in Apache Flink Web Dashboard
Apache Flink is another emerging framework in the Big Data space. It is the use of streaming processing to simulate batch processing , and therefore can provide sub-second , consistent with Exactly-once semantics of real-time processing capabilities . A command execution vulnerability exists in...
Apache Flink JAR Upload Java Code Execution
This module uses job functionality in Apache Flink dashboard web interface to upload and execute a JAR file, leading to remote execution of arbitrary Java code as the web server user. This module has been tested successfully on Apache Flink versions: 1.9.3 on Ubuntu 18.04.4; 1.11.2 on Ubuntu...
CVE-2017-17730
DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flinkadd.php...
Desdev DedeCMS SQL Injection Vulnerability
Desdev DedeCMS Dream Weaving Content Management System is China's Zhuozhuo network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. A SQL injection vulnerability exis...
Information Disclosure Via Checkpoint Directory Permission
flink-runtime is vulnerable to information disclosure. The vulnerability can happen because it creates checkpoint directory without specified permission, allowing another user to delete or read files under it. Therefore it can cause restore failure or information disclosure...
