CVE-2023-50740

Apache Linkis version 1.4.0 and earlier is vulnerable to a log information disclosure vulnerability (CWE-532). The flaw exists in the Linkis data source module when using the Oracle data source , where the system incorrectly prints the password to the log file. An attacker could potentially obtai...

CVE-2024-45627

Apache Linkis, specifically the Metadata Query Service JDBC component, is vulnerable to an Arbitrary File Read vulnerability in versions prior to 1.7.0 . The root cause is an input validation error resulting from a lack of effective filtering of parameters within the DataSource Manager Module . A...

CVE-2024-27181

Apache Linkis versions