Skip to content
OpenAdvisories
Medium · 4.9 CVE-2024-27182 EUVD-2024-2603GHSA-j6vx-r77h-44wc

Apache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerability

Published Aug 2, 2024 · Updated Mar 27, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Linkis Basic management services Package: org.apache.linkis:linkis Ecosystem: Maven

Description

In Apache Linkis <= 1.5.0,

Arbitrary file deletion in Basic management services on

A user with an administrator account could delete any file accessible by the Linkis system user

.
Users are recommended to upgrade to version 1.6.0, which fixes this issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Linkis Basic management services 1.3.2 – < 1.6.0 1.6.0

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.linkis:linkis < 1.6.0 1.6.0 GHSA-j6vx-r77h-44wc

References