CVE-2023-46801

Name of the Vulnerable Software and Affected Versions: Apache Linkis versions <= 1.5.0

Description: The issue is related to a deserialization vulnerability in the MySQL Data Source Handler component of Apache Linkis, which can be exploited for remote code execution. This can be achieved by injecting malicious files into the server through jrmp. The attack requires the attacker to have an authorized account from Linkis.

Recommendations: For Apache Linkis versions <= 1.5.0, upgrade the Java version to >= 1.8.0 241. For Apache Linkis versions <= 1.5.0, upgrade Linkis to version 1.6.0.