CVE-2024-27182

MEDIUM EPSS 49.9%

Published Aug 2, 20241y ago · Modified Jun 17, 20262w ago

4.9 CVSS 3.1

Medium

Published Aug 2, 2024 1y ago

Last Modified Jun 17, 2026 2w ago

Description

In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator account could delete any file accessible by the Linkis system user . Users are recommended to upgrade to version 1.6.0, which fixes this issue.

CVSS Details

Base Score

4.9

Exploitability

1.2

Impact

3.6

Vector string

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required High

User Interaction None

Scope Unchanged

Confidentiality None

Integrity High

Availability None

Threat Intelligence

EPSS Exploit Probability

49.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-552

Affected Products 1

Vendor	Product	Version	Range
apache	linkis	*	≥1.3.2 – <1.6.0

References 2

openwall.com http://www.openwall.com/lists/oss-security/2024/08/02/4
lists.apache.org https://lists.apache.org/thread/2of1p433h8rbq2bx525rtftnk19oz38h

Mailing ListVendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.