Apache Linkis Datasource (Apache Software Foundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-15. Vendor: Apache Software Foundation.

CVEs of Apache Linkis Datasource

• CVE-2023-49566 - CVSS 8.8 (high), 2024-07-15: In Apache Linkis <=1.5.0, due to the lack of effective filtering of parameters, an attacker configuring malicious db2 parameters in the DataSource Manager…
• CVE-2023-46801 - CVSS 8.8 (high), 2024-07-15: In Apache Linkis <= 1.5.0, data source management module, when adding Mysql data source, exists remote code execution vulnerability for java version <…
• CVE-2023-41916 - CVSS 6.5 (medium), 2024-07-15: In Apache Linkis =1.4.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource…
• CVE-2023-50740 - CVSS 5.3 (medium), 2024-03-06: In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module.  We recommend users upgrade…