We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-27182

Apache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerability



Description

In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator account could delete any file accessible by the Linkis system user . Users are recommended to upgrade to version 1.6.0, which fixes this issue.

Reserved 2024-02-21 | Published 2024-08-02 | Updated 2024-08-02 | Assigner apache

Problem types

CWE-552 Files or Directories Accessible to External Parties

Product status

Default status
unaffected

1.3.2 before 1.6.0
affected

Credits

superx reporter

References

lists.apache.org/thread/2of1p433h8rbq2bx525rtftnk19oz38h vendor-advisory

cve.org (CVE-2024-27182)

nvd.nist.gov (CVE-2024-27182)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-27182

Support options

Helpdesk Chat, Email, Knowledgebase
Subscribe to our newsletter to learn more about our work.