Vulnerabilities > CVE-2024-27182 - Files or Directories Accessible to External Parties vulnerability in Apache Linkis 1.4.0/1.5.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator account could delete any file accessible by the Linkis system user . Users are recommended to upgrade to version 1.6.0, which fixes this issue.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |