-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.linkis:linkis | maven | < 1.6.0 | 1.6.0 |
The vulnerability stems from insufficient path validation in administrative file management features. Based on: 1) The CWE-552 pattern of external path access 2) Admin-triggered file operations described in advisories 3) Common vulnerability patterns in Java/Scala web services 4) Linkis' module structure showing file management components. While exact patched code isn't available, these functions align with the described attack vector where admin privileges + path traversal in file deletion endpoints would enable the exploit.