Package · Maven

org.apache.flink:flink-runtime_2.11

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.1

CVE-2020-17519 Exploited Public exploit Scanner template EPSS 98%

Apache Flink directory traversal attack: reading remote files through the REST API

A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible b…

Apache Software Foundation Apache Flink org.apache.flink:flink-runtime_2.12 org.apache.flink:flink-runtime_2.11 Maven

Jan 5, 2021
KEV May 23, 2024