https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:37:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-05289 bdu:2024-05289 https://cve.radiocsirt.org/vuln/bdu:2024-05289 https://cve.radiocsirt.org/vuln/euvd-2026-222762 EUVD-2026-222762 https://cve.radiocsirt.org/vuln/euvd-2026-222762 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41916 <p>In Apache Linkis =1.4.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource Manager Module will trigger arbitrary file reading. Therefore, the parameters in the Mysql JDBC URL should be blacklisted. This attack requires the attacker to obtain an authorized account from Linkis before it can be carried out. Versions of Apache Linkis = 1.4.0 will be affected.  We recommend users upgrade the version of Linkis to version 1.5.0.</p> <p>In Apache Linkis =1.4.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource Manager Module will trigger arbitrary file reading. Therefore, the parameters in the Mysql JDBC URL should be blacklisted. This attack requires the attacker to obtain an authorized account from Linkis before it can be carried out. Versions of Apache Linkis = 1.4.0 will be affected.  We recommend users upgrade the version of Linkis to version 1.5.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-41916 https://cve.radiocsirt.org/vuln/ghsa-f22j-9j59-33j4 <p><strong>Affected:</strong> Maven: org.apache.linkis:linkis-datasource</p> <p>In Apache Linkis = 1.4.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource Manager Module will trigger arbitrary file reading. Therefore, the parameters in the Mysql JDBC URL should be blacklisted. This attack requires the attacker to obtain an authorized account from Linkis before it can be carried out.</p> <p>Versions of Apache Linkis = 1.4.0 will be affected.</p> <p>We recommend users upgrade the version of Linkis to version 1.6.0.</p> <p><strong>Affected:</strong> Maven: org.apache.linkis:linkis-datasource</p> <p>In Apache Linkis = 1.4.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource Manager Module will trigger arbitrary file reading. Therefore, the parameters in the Mysql JDBC URL should be blacklisted. This attack requires the attacker to obtain an authorized account from Linkis before it can be carried out.</p> <p>Versions of Apache Linkis = 1.4.0 will be affected.</p> <p>We recommend users upgrade the version of Linkis to version 1.6.0.</p> https://cve.radiocsirt.org/vuln/ghsa-f22j-9j59-33j4 https://cve.radiocsirt.org/vuln/gsd-2023-41916 gsd-2023-41916 https://cve.radiocsirt.org/vuln/gsd-2023-41916