Remote Code Execution (RCE)

2023-04-1205:32:57

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

remote code execution

org.apache.linkis

improper parameter filtering

malicious code

mysql jdbc parameters

insecure deserialization

software

EPSS

0.024

Percentile

89.9%

JSON

org.apache.linkis:linkis-engineplugin-jdbc is vulnerable to Remote Code Execution (RCE). Improper parameter filtering allows an attacker to upload and execute malicious code on the system, using malicious Mysql JDBC parameters in JDBC EngineConn Module which may trigger insecure deserialization.