GHSA-v352-rg37-5q5m
Apache Linkis vulnerable to privilege escalation
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.apache.linkis:linkis | < 1.6.0 | 1.6.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted account allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue.
References
External links from the advisory. They lead to third-party sites.