Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-27603

Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue

Description

In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a Zip Slip issue, which will lead to a potential RCE vulnerability. We recommend users upgrade the version of Linkis to version 1.3.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Linkis

Default version status: unaffected

  • 0 to ≤ 1.3.1affected

References