CVE-2020-17519 Apache Flink
Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the JobManager through its REST interface.
- CVSS
- not scored
On CISA’s exploited list
Apache Flink Improper Access Control Vulnerability
- Added
- 2024-05-23
- Federal patch deadline
- 2024-06-13
- Ransomware use
- not known