CVE-2025-66249

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Livy. This issue affects Apache Livy: from 0.3.0 before 0.9.0. The vulnerability can only be exploited with non-default Apache Livy Server settings. If the configuration value...

Apache Livy: Unauthorized directory access

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Livy. This issue affects Apache Livy: from 0.3.0 before 0.9.0. The vulnerability can only be exploited with non-default Apache Livy Server settings. If the configuration value...

EUVD-2025-208639

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Livy. This issue affects Apache Livy: from 0.3.0 before 0.9.0. The vulnerability can only be exploited with non-default Apache Livy Server settings. If the configuration value...

CVE-2025-66249 Apache Livy: Unauthorized directory access

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Livy. This issue affects Apache Livy: from 0.3.0 before 0.9.0. The vulnerability can only be exploited with non-default Apache Livy Server settings. If the configuration value...

CVE-2025-66249

Apache Livy versions 0.3.0 through 0.8.x are vulnerable to a Path Traversal vulnerability due to improper limitation of pathnames to a restricted directory. This flaw can be exploited only when the livy.file.local-dir-whitelist configuration value is set to a non-default value, allowing an attack...

Apache Livy 路径遍历漏洞

Apache Livy is an application server developed by the Apache Foundation in the United States. It provides a way to programmatically submit Spark jobs from web and mobile applications, with fault tolerance and multi-tenant capabilities. Prior to Apache Livy 0.9.0, there was a path traversal...