CVE-2023-50740

Name of the Vulnerable Software and Affected Versions Apache Linkis versions <=1.4.0

Description The issue is related to insufficient protection of registration data in Apache Linkis, which may allow a remote attacker to gain unauthorized access to protected information. Specifically, when using the Oracle data source of the Linkis data source module, the password is printed to the log.

Recommendations For Apache Linkis versions <=1.4.0, upgrade the version of Linkis to version 1.5.0 to resolve the issue.