Arbitrary File Deletion

org.apache.linkis, linkis-common is vulnerable to Arbitrary File Deletion. The vulnerability is due to a defect in the Basic management services component which allows a user with an administrator account to delete any file accessible by the Linkis system user...

Authentication Bypass

org.apache.linkis:linkis-cli-application is vulnerable to Authentication Bypass. The vulnerability exists because the generated default tokens are easy to guess, which allows a remote attacker to bypass authentication mechanisms...

Remote Code Execution (RCE)

org.apache.linkis:linkis-engineplugin-jdbc is vulnerable to Remote Code Execution RCE. Improper parameter filtering allows an attacker to upload and execute malicious code on the system, using malicious Mysql JDBC parameters in JDBC EngineConn Module which may trigger insecure deserialization...