Apache Linkis DataSource

2 results · Clear filters · Feed

• Medium 6.5
  CVE-2023-41916

  Apache Linkis DataSource: DatasourceManager module has a JDBC parameter judgment logic vulnerability that allows for arbitrary file reading

  In Apache Linkis =1.4.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource Manager Module will trigger arbitrary file reading. Therefore, the parameters in the Mysql JDBC URL should…

  Apache Software Foundation Apache Linkis DataSource org.apache.linkis:linkis-datasource Maven
  Jul 15, 2024
• Medium 5.3
  CVE-2023-50740

  Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

  In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module.  We recommend users upgrade the version of Linkis to version 1.5.0

  Apache Software Foundation Apache Linkis DataSource org.apache.linkis:linkis Maven
  Mar 6, 2024