CVE-2023-29216

In Apache Linkis, the DatasourceManager module (<=1.3.1) suffers a deserialization vulnerability caused by unfiltered parameters, enabling an attacker to configure a new data source via the MySQL data source and trigger remote code execution. Affected versions: Linkis 1.3.1 and earlier (

CVE-2023-27602

Summary: CVE-2023-27602 affects Apache Linkis <= 1.3.1, where the PublicService module allows uploading files without restrictions on path or type. This may enable arbitrary file uploads and, per CNVD, could lead to remote code execution. Impact (as stated): Potential total impact via arbitrar...

CVE-2023-27603

CVE-2023-27603 affects Apache Linkis

CVE-2023-27987

CVE-2023-27987 affects Apache Linkis

CVE-2023-29215

Affected software : Apache Linkis 1.3.1 and earlier (<= 1.3.1;