Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-50740 EUVD-2024-0960GHSA-m757-p8rv-4q93

Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

Published Mar 6, 2024 · Updated Feb 13, 2025 · Assigned by apache

Description

In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module. 
We recommend users upgrade the version of Linkis to version 1.5.0

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Linkis DataSource < 1.5.0 1.5.0

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.linkis:linkis < 1.5.0 1.5.0 GHSA-m757-p8rv-4q93

References