Product · Apache Software Foundation

Apache Flink

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.1

CVE-2020-17519 Exploited Public exploit EPSS 98%

Apache Flink directory traversal attack: reading remote files through the REST API

A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible b…

Apache Software Foundation Apache Flink org.apache.flink:flink-runtime_2.12 org.apache.flink:flink-runtime_2.11 Maven

Jan 5, 2021
KEV May 23, 2024