CVE-2024-27182

Published: Aug 2, 2024Modified: Jun 17, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator account could delete any file accessible by the Linkis system user . Users are recommended to upgrade to version 1.6.0, which fixes this issue.

Affected (1)

Products: Apache: Linkis

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Linkis	From 1.3.2 to 1.6.0

Related CWEs

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (2)

https://lists.apache.org/thread/2of1p433h8rbq2bx525rtftnk19oz38h

Source: security@apache.org

Mailing ListVendor Advisory

http://www.openwall.com/lists/oss-security/2024/08/02/4

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.