Skip to content

Apache Linkis vulnerable to privilege escalation

Moderate severity GitHub Reviewed Published Aug 2, 2024 to the GitHub Advisory Database • Updated Aug 2, 2024

Package

maven org.apache.linkis:linkis (Maven)

Affected versions

< 1.6.0

Patched versions

1.6.0

Description

In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted account allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue.

References

Published by the National Vulnerability Database Aug 2, 2024
Published to the GitHub Advisory Database Aug 2, 2024
Last updated Aug 2, 2024
Reviewed Aug 2, 2024

Severity

Moderate

EPSS score

0.043%
(10th percentile)

Weaknesses

CVE ID

CVE-2024-27181

GHSA ID

GHSA-v352-rg37-5q5m

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.