← Back to browse · API

CVE-2023-27603

Severity
CRITICAL
CVSS
9.8
EPSS
0.01808
Risk score
39.83
CISA KEV
No
PoC
No
Published
2023-04-10
Modified
2024-10-22
First seen
2026-08-07
Aliases
EUVD-2023-2114, GHSA-PJ5J-W7MW-W797
Products
Apache Software Foundation:Apache Linkis 0 ≤1.3.1
Sources
euvd EUVD-2023-2114

Description

In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a Zip Slip issue, which will lead to a potential RCE vulnerability. We recommend users upgrade the version of Linkis to version 1.3.2.

References