Apache Software Foundation Apache Flink güvenlik açıkları (CVE)

Apache Software Foundation Apache Flink için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

8.1Yüksek

CVE-2026-35194 6 ay önce

Apache Flink: Remote code execution via SQL injection in code generation

Apache Software Foundation Apache Flink

Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affe…

9.1Kritik

CVE-2020-17519 KEV 5 yıl önce

Apache Flink directory traversal attack: reading remote files through the REST API

Apache Software Foundation Apache Flink; apache flink

A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible b…

98%EPSS