Apache Flink Upload Path Traversal Vulnerability CVE-2020-17518 Scanner
Details
Stay Up To Date
Follow @secforeveryoneAsset Type
DOMAIN,IP,URL
Need Membership
Yes
Asset Verify
Yes
API Support
Yes
Estimate Time (Second)
30
Apache Flink Upload Path Traversal Vulnerability CVE-2020-17518 Scanner Detail
There is a REST handler allows to change uploaded file since Apache Flink 1.5.1. Attackers can modify HTTP Headers and acces to local file systems.
What is Apache Flink?
Apache Flink is an open-source stream processing framework.
Some Advice for Common Problems
It is suggested to update your Apache Flink framework to version 1.11.3 or 1.12.0.
