CISA Warns of Actively Exploited Apache Flink Security Vulnerability
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-17519 | Unauthenticated Arbitrary File Read in Apache Flink JobManager REST Interface | 7.5 | 98% | KEVPoC | KEV |
| CVE-2020-28188 | Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php… | 9.8 | 96% | PoC ×2 | |
| CVE-2020-29227 | An issue was discovered in Car Rental Management System 1.0 | 9.8 | 17% | PoC |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan May 23, 2024 Threat Intelligence / Vulnerability, The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting Apache Flink, an open-source, unified stream-processing and batch-processing framework, to the Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.