Apache Linkis Arbitrary File Deletion Vulnerability in org.apache.linkis:linkis
Summary
CVE-2024-27182: Apache Linkis arbitrary file deletion vulnerability. Affects org.apache.linkis:linkis versions < 1.6.0. Fixed in 1.6.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache Linkis is a management system that provides basic management services for users with administrator accounts. It allows users to perform various operations on files and resources within the Linkis system. However, versions up to 1.5.0 of Apache Linkis are vulnerable to an arbitrary file deletion issue. This vulnerability allows an attacker with an administrator account to delete any file accessible by the Linkis system user.
Vulnerability Detail
The arbitrary file deletion vulnerability in Apache Linkis poses a significant security risk. An attacker with an administrator account can exploit this vulnerability to delete any file accessible by the Linkis system user. This could lead to the loss of important data or the disruption of critical system functionality. The vulnerability has a CVSS score of 6.5, indicating a high severity level.
How To Fix
Minimum fixed version
1.6.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The arbitrary file deletion vulnerability in Apache Linkis poses a significant security risk. Users are strongly advised to upgrade to version 1.6.0 to mitigate this vulnerability and ensure the security of their systems.
See every vulnerability recorded for org.apache.linkis:linkis →
FAQ
Apache Linkis is a management system that provides basic management services for users with administrator accounts. It allows users to perform various operations on files and resources within the Linkis system.
The arbitrary file deletion vulnerability allows an attacker with an administrator account to delete any file accessible by the Linkis system user. This could result in the loss of important data or the disruption of critical system functionality.
The CVSS score of this vulnerability is 6.5, indicating a high severity level.
To fix this vulnerability, you should upgrade to version 1.6.0 of Apache Linkis. This version includes a patch that addresses the arbitrary file deletion issue.
No, there is no known workaround for this vulnerability. Upgrading to version 1.6.0 is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.linkis:linkis.
