Skip to content
OpenAdvisories

Package · Maven

org.apache.linkis:linkis-datasource

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Apache Linkis DatasourceManager module has a deserialization command execution

    In Apache Linkis <=1.3.1, because the parameters are not effectively filtered, the attacker uses the MySQL data source and malicious parameters to configure a new data source to trigger a deserialization vulnerability, eventually leading to remote code execut…