org.apache.linkis/linkis-engineconn vulnerabilities

Latest org.apache.linkis/linkis-engineconn CVEs

Newest publication first

1. CVE-2023-29215 Apache Linkis JDBC EngineCon has a deserialization command execution

   Published 2023-04-10

   Critical·CVSS 9.8 EPSS 2.1%

   In Apache Linkis <=1.3.1, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in JDBC EengineConn Module will trigger a deserialization vulnerability and eventually lead to remote code execution. Therefore, the parameters...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.