Skip to content
OpenAdvisories

Package · Maven

org.apache.flink:flink-runtime

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2020-17518 Public exploit Scanner template EPSS 49%

    Apache Flink directory traversal attack: remote file writing through the REST API

    Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users…

    Apache Software Foundation Apache Flink org.apache.flink:flink-runtime Maven