GHSA-m757-p8rv-4q93

Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-50740

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.apache.linkis:linkis	< 1.5.0	1.5.0

Details

As written in the advisory (Markdown source, shown as plain text).

In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module. We recommend users upgrade the version of Linkis to version 1.5.0

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2023-50740 advisory
https://github.com/apache/linkis/commit/08cbcfca140afebae10e1582ee87721578719ded web
https://github.com/apache/linkis package
https://lists.apache.org/thread/5o342chnpyd6rps68ygzfkzycxl998yo web
http://www.openwall.com/lists/oss-security/2024/03/06/2 web