https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:30:56 +0000 https://cve.radiocsirt.org/vuln/cve-2023-49566 <p><strong>Affected:</strong> Apache Software Foundation Apache Linkis DataSource</p> <p>In Apache Linkis &lt;=1.5.0, due to the lack of effective filtering of parameters, an attacker configuring malicious</p> <p>db2</p> <p>parameters in the DataSource Manager Module will result in jndi injection. Therefore, the parameters in the DB2 URL should be blacklisted.</p> <p>This attack requires the attacker to obtain an authorized account from Linkis before it can be carried out.</p> <p>Versions of Apache Linkis</p> <p>&lt;=1.5.0</p> <p>will be affected. We recommend users upgrade the version of Linkis to version 1.6.0.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Linkis DataSource</p> <p>In Apache Linkis &lt;=1.5.0, due to the lack of effective filtering of parameters, an attacker configuring malicious</p> <p>db2</p> <p>parameters in the DataSource Manager Module will result in jndi injection. Therefore, the parameters in the DB2 URL should be blacklisted.</p> <p>This attack requires the attacker to obtain an authorized account from Linkis before it can be carried out.</p> <p>Versions of Apache Linkis</p> <p>&lt;=1.5.0</p> <p>will be affected. We recommend users upgrade the version of Linkis to version 1.6.0.</p> https://cve.radiocsirt.org/vuln/cve-2023-49566