漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Apache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability
Vulnerability Description
In Apache Linkis <=1.3.0 when used with the MySQL Connector/J in the data source module, an authenticated attacker could read arbitrary local files by connecting a rogue MySQL server, By adding allowLoadLocalInfile to true in the JDBC parameter. Therefore, the parameters in the JDBC URL should be blacklisted. Versions of Apache Linkis <= 1.3.0 will be affected. We recommend users upgrade the version of Linkis to version 1.3.1
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Apache Linkis 输入验证错误漏洞
Vulnerability Description
Apache Linkis是美国阿帕奇（Apache）基金会的一款中间件产品，可以在上层应用和底层数据引擎之间建立起有效的连接。 Apache Linkis 1.3.0及之前版本存在输入验证错误漏洞，该漏洞源于经过身份验证的攻击者可以通过连接恶意的mysql服务器读取任意本地文件。
CVSS Information
N/A
Vulnerability Type
N/A