Lucene search
+L

3 matches found

OSV
OSV
added 2024/03/06 10:52 a.m.28 views

BIT-FLINK-2020-17518 Apache Flink directory traversal attack: remote file writing through the REST API

Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or...

7.5CVSS7.4AI score0.50038EPSS
SaveExploits1References25
RedhatCVE
RedhatCVE
added 2021/01/06 2:52 p.m.51 views

CVE-2020-17518

Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or...

7.5CVSS3AI score0.50038EPSS
SaveExploits1References3
OSV
OSV
added 2021/01/05 12:15 p.m.33 views

CVE-2020-17518

Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or...

7.5CVSS7AI score
SaveExploits0References24
Rows per page
Query Builder