Lucene search
Veracode Vulnerability DatabaseVERACODE:40149HistoryApr 18, 2023 - 8:19 a.m.
Arbitrary File Upload
2023-04-1808:19:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
arbitrary file upload
apache linkis
upload restrictions
server security
EPSS
0.027
Percentile
90.5%
org.apache.linkis:linkis-storage-script-dev-server is vulnerable to Arbitrary File Upload. The vulnerability exists because the library does not properly validate the uploaded file paths, and file types, allowing an attacker to bypass restrictions and upload malicious files to the server.
References
www.openwall.com/lists/oss-security/2023/04/10/1
www.openwall.com/lists/oss-security/2023/04/18/4
www.openwall.com/lists/oss-security/2023/04/19/3
github.com/apache/linkis/commit/8244bd1c3d49a7528085a9357ab6976287cf51ac
github.com/apache/linkis/pull/4366
lists.apache.org/thread/wt70jfc0yfs6s5g0wg5dr5klnc48nsp1
Related
osv
osv
Apache Linkis Unrestricted File Upload vulnerability
2023-07-06 19:24:13
CVE-2023-27602
2023-04-10 08:15:06
cvelist
cvelist
prion
prion
Path traversal
2023-04-10 08:15:00
github
github
Apache Linkis Unrestricted File Upload vulnerability
2023-07-06 19:24:13
nvd
nvd
CVE-2023-27602
2023-04-10 08:15:06
cve
cve
CVE-2023-27602
2023-04-10 08:15:06