Linkis CVE-2025-29847

In Apache Linkis <=1.3.1, because the parameters are not effectively filtered, the attacker uses the MySQL data source a

In Apache Linkis <=1.3.1, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql

In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a Zi

In Apache Linkis <=1.3.1, The PublicService module uploads files without restrictions on the path to the uploaded files,

In Apache Linkis <=1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy f

In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted accou

In Apache Linkis <=1.2.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code

In Apache Linkis <= 1.5.0, a Random string security vulnerability in Spark EngineConn, random string generated by the To

A vulnerability. When org.apache.linkis.metadata.util.HiveUtils.decode() fails to perform Base64 decoding, it records th

In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator account

In Apache Linkis <1.7.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql J