CVE-2024-39928

7.5HIGH

In Apache Linkis <= 1.5.0, a Random string security vulnerability in Spark EngineConn, random string generated by the Token when starting Py4j uses the Commons Lang's RandomStringUtils. Users are reco

公開日: 9/25/2024更新日: 5/16/2025
NVDで表示MITREで表示

説明

In Apache Linkis <= 1.5.0, a Random string security vulnerability in Spark EngineConn, random string generated by the Token when starting Py4j uses the Commons Lang's RandomStringUtils. Users are recommended to upgrade to version 1.6.0, which fixes this issue.

AI分析AIによる分析

影響を受ける製品

apachelinkis

参照