Advisoriesby IbisApache Linkis: Arbitrary File Read via Double URL Encoding Bypass
A vulnerability in Apache Linkis.
Problem Description
When using the JDBC engine and data source functionality, if the URL parameter configured on the frontend has undergone multiple rounds of URL encoding, it may bypass the system's checks. This bypass can trigger a vulnerability that allows unauthorized access to system files via JDBC parameters.
Scope of Impact
This issue affects Apache Linkis: from 1.3.0 through 1.7.0.
Severity level
moderate
Solution
Continuously check if the connection information contains the "%" character; if it does, perform URL decoding.
Users are recommended to upgrade to version 1.8.0, which fixes the issue.
More questions about this vulnerability can be discussed here: https://lists.apache.org/list?dev@linkis.apache.org:2025-9:cve
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| org.apache.linkis:linkis Maven | >= 1.3.0, < 1.8.0 | 1.8.0 |
Details and references
More linkis advisories
All linkis
Apache Linkis arbitrary file deletion vulnerabilityCVE-2024-27182fixed in 1.6.0Apache Linkis vulnerable to privilege escalationCVE-2024-27181fixed in 1.6.0Apache Linkis DataSource: DataSource module Oracle SQL Database Password LoggedCVE-2023-50740fixed in 1.5.0Apache Linkis Authentication Bypass vulnerabilityCVE-2023-27987fixed in 1.3.2Apache Linkis Zip Slip issueCVE-2023-27603fixed in 1.3.2Apache Linkis Unrestricted File Upload vulnerabilityCVE-2023-27602fixed in 1.3.2