CVE-2024-27181

HIGH

Apache Linkis <=1.5.0 - Privilege Escalation

Title source: llm

Description

In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted account allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue.

References (2)

Scores

CVSS v3 8.8
EPSS 0.0034
EPSS Percentile 56.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-269
Status published

Affected Products (2)

apache/linkis < 1.6.0
org.apache.linkis/linkis < 1.6.0Maven

Timeline

Published Aug 02, 2024
Tracked Since Feb 18, 2026