CVE-2020-17518

Уязвимость обхода каталога в Apache Flink, позволяющая читать/записывать удалённые файлы через REST API Номер уязвимости: CVE-2020-17518 Описание уязвимости: CVE-2020-17518: запись удалённых файлов через REST API Затронутые версии: Flink 1.5.1 – 1.11.2 Безопасные версии: Flink 1.11.3 или Flink...

westone-CVE-2020-17519-scanner

westone-CVE-2020-17519-scanner Apache Flink 1.11.0、1.11.1、1.11.2 Hackers podem ler/escrever arquivos remotos via REST API Instalação e Uso git clone https://github.com/Osyanina/westone-CVE-2020-17519-scanner.git cd westone-CVE-2020-17519-scanner cmd CVE-2020-17519.exe...

CVE-2020-17518

CVE-2020-17518 Apache Flink RESTful API – Beliebiger Datei-Upload durch Pfad-Traversal Apache Flink ist ein Framework und eine verteilte Verarbeitungsengine für zustandsbehaftete Berechnungen über unbegrenzte und begrenzte Datenströme, die mit Java und Scala entwickelt wurde. Ein REST-Handler, de...

CVE-2020-17519

Applicazione Vulnerabile Questo modulo sfrutta una vulnerabilità di directory traversal non autenticata in Apache Flink versione 1.11.0 e presente anche nelle versioni 1.11.1 e 1.11.2, consentendo la lettura arbitraria di file con i privilegi del server web. Versione vulnerabile:...

Apache-Flink-Dashboard-rec

Apache-Flink-Web-Dashboard-RCE Apache Flink Web Dashboard RCE...

CVE-2020-17519

Utilizzo e disclaimer Questo script è per il rilevamento batch della vulnerabilità di directory traversal di Apache Flink CVE-2020-17519. Utilizzo: Python CVE-2020-17519.py urls.txt In urls.txt ogni URL è su una riga, gli indirizzi vulnerabili vengono scritti in vul.txt Versioni interessate: Apac...

CVE-2026-25194

CVE-2026-35194 — Iniezione di codice SQL in Apache Flink Esecuzione di codice remoto sui TaskManager di Apache Flink tramite iniezione nella generazione di codice SQL...

CVE-2020-17519-Apache-Flink

CVE-2020-17519 Apache Flink lettura arbitraria di file Ambito di impatto Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd Istruzioni per l'uso dello script python3 CVE-2020-17519 --help Visualizza la...

CVE-2020-17519

CVE-2020-17519 Beliebiges Dateilesen über die Apache-Flink-REST-API Apache Flink ist ein Framework und eine verteilte Verarbeitungs-Engine für zustandsbehaftete Berechnungen über unbegrenzte und begrenzte Datenströme, das mit Java und Scala entwickelt wurde. Eine Änderung, die in Apache Flink...

Flink-CVE-2020-17518-getshell

Flink-CVE-2020-17518-getshell Apache Flink CVE-2020-17518 का उपयोग करके getshell करें देखें: https://blog.rakjong.com/2021/01/10/flink-cve-2020-17518-getshell/...

apache-flink-directory-traversal.nse

Este repositorio nao tem um README...

apache__flink_CVE-2020-17519_1-11-2

Apache Flink Apache Flink è un framework di elaborazione flussi open source con potenti capacità di elaborazione di flussi e batch. Scopri di più su Flink su https://flink.apache.org/ Caratteristiche Un runtime orientato allo streaming che supporta sia l'elaborazione batch che i programmi di...

Flink_RCE

Apache Flink Web Dashboard: Unautorisierter Zugriff und Upload einer schädlichen JAR-Datei führen zu Remote-Code-Ausführung msf nc Python-Verwendung: python 02-Flink.py http://10.10.20.100:8081 nc.jar...

com.navercorp.pinpoint:pinpoint-batch (>=2.3.0, <=3.1.0), com.navercorp.pinpoint:pinpoint-flink (>=2.3.0, <=3.0.5) +6 more potentially affected by CVE-2026-57948 via com.navercorp.pinpoint:pinpoint-web (>=2.3.0, <=3.1.0)

com.navercorp.pinpoint:pinpoint-web MAVEN version =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =3.0.0, =3.0.0, =2.5.0, =3.1.0 Source cves: CVE-2026-57948 Source advisory: SNYK:JAVA-COMNAVERCORPPINPOINT-17755931...

Code Injection

Apache Flink is vulnerable to Code Injection. The vulnerability is due to improper escaping of user-controlled strings during SQL code generation, which allows an authenticated attacker to inject arbitrary Java code and execute it on TaskManagers through specially crafted SQL queries...

BIT-FLINK-2026-35194 Apache Flink: Remote code execution via SQL injection in code generation

Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affects JSON functions 1.15.0+ and LIKE...

Apache Flink: Remote code execution via SQL injection in code generation

Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affects JSON functions 1.15.0+ and LIKE...

GHSA-2F54-V4HM-FX73 Apache Flink: Remote code execution via SQL injection in code generation

Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affects JSON functions 1.15.0+ and LIKE...

CVE-2026-35194

Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affects JSON functions 1.15.0+ and LIKE...

CVE-2026-35194

Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affects JSON functions 1.15.0+ and LIKE...