CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-01-05
Apache Flink JobManager REST API Arbitrary File Read & Directory Traversal Vulnerability (CVE-2020-17519) Security Advisory
[Affected Scope] Apache Flink versions 1.11.0, 1.11.1, and 1.11.2
[Impact] Unauthenticated remote attackers can read arbitrary files on the JobManager local filesystem via the REST interface
[Mitigation] Immediately upgrade to Apache Flink 1.11.3, 1.12.0, or later versions