CloudMap 漏洞情报库

高危CVE-2020-175192021/01/05

Apache Flink - Local File Inclusion

Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process (aka local file inclusion).

flinkPoC 已收录EXP 已收录

CVSS7.5EPSS 94.4%

严重CVE-2020-175182021/01/05

Apache Flink 1.5.1 - Local File Inclusion

Apache Flink 1.5.1 is vulnerable to local file inclusion because of a REST handler that allows file uploads to an arbitrary location on the local file system through a maliciously modified HTTP HEADER.

flinkPoC 已收录EXP 已收录RCE

CVSS7.5EPSS 93.2%

严重2020/10/10

Apache Flink - Remote Code Execution

Apache Flink

flinkPoC 已收录EXP 已收录RCE

CVSS10.0

flink

关联漏洞

Apache Flink - Local File Inclusion

Apache Flink 1.5.1 - Local File Inclusion

Apache Flink - Remote Code Execution