apache flink Schwachstellen (CVE)

Für apache flink veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

8.1Hoch

CVE-2026-35194 vor 6 Monaten

Apache Flink: Remote code execution via SQL injection in code generation

Apache Software Foundation Apache Flink

Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affe…

9.1Kritisch

CVE-2020-17519 KEV vor 5 Jahren

Apache Flink directory traversal attack: reading remote files through the REST API

Apache Software Foundation Apache Flink; apache flink

A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible b…

98%EPSS