Lucene search
Veracode Vulnerability DatabaseVERACODE:40150HistoryApr 18, 2023 - 8:52 a.m.
Remote Code Execution (RCE)
2023-04-1808:52:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
remote code execution
apache linkis-common
ziputils.scala
malicious code
system security
0.016 Low
EPSS
Percentile
87.6%
org.apache.linkis:linkis-common is vulnerable to Remote Code Execution (RCE). Lack of proper checking of supplied zip paths in ZipUtils.scala allows an attacker to upload and execute malicious code on the system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| linkis-common | le | 1.3.1 | |
| linkis-common | le | 1.3.1 |
Related
prion
prion
Design/Logic Flaw
2023-04-10 08:15:00
cvelist
cvelist
cve
cve
CVE-2023-27603
2023-04-10 08:15:07
osv
osv
CVE-2023-27603
2023-04-10 08:15:07
Apache Linkis Zip Slip issue
2023-07-06 19:24:13
nvd
nvd
CVE-2023-27603
2023-04-10 08:15:07
github
github
Apache Linkis Zip Slip issue
2023-07-06 19:24:13