Apache Flink directory traversal attack: reading remote files through the REST API
100Vexday Risk Score
Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.
ssvc Actcvss 9.1epss 98%
de la publicación al arma1 días
Publicada en NVD5 ene
1ª PoC+1d
metasploit5 ene
CISA KEV+1234d
probabilidad de explotación
98%top 1% de las CVE
explotación observada
síCISA + VulnCheck
26 exploit(s) público(s)
Acción exigida por CISAplazo federal: 2024-06-13
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Investigado y redactado con IA a partir del advisory del fabricante y análisis públicos, con las fuentes citadas. Verifica siempre la versión corregida en el advisory oficial antes de actuar.
A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit b561010b0ee741543c3953306037f00d7a9f0801 from apache/flink:master.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Productos afectados
Apache Software Foundation · Apache FlinkPoCs públicas encontradas — 26✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/49398githubgithub.com/MrCl0wnLab/SimplesApachePathTraversal★ 61githubgithub.com/B1anda0/CVE-2020-17519★ 48githubgithub.com/murataydemir/CVE-2020-17519★ 8githubgithub.com/dolevf/apache-flink-directory-traversal.nse★ 3githubgithub.com/yaunsky/CVE-2020-17519-Apache-Flink★ 1githubgithub.com/QmF0c3UK/CVE-2020-17519★ 1githubgithub.com/givemefivw/CVE-2020-17519★ 1githubgithub.com/dev-team-12x/CVE-2020-17519★ 0githubgithub.com/radbsie/CVE-2020-17519-Exp★ 0githubgithub.com/zhangweijie11/CVE-2020-17519★ 0githubgithub.com/GazettEl/CVE-2020-17519★ 0githubgithub.com/shoucheng3/apache__flink_CVE-2020-17519_1-11-2★ 0githubgithub.com/Osyanina/westone-CVE-2020-17519-scanner★ 0vulncheckvulncheck.com/xdb/c096ce6f775bno verificadovulncheckvulncheck.com/xdb/259c72303ba8no verificadovulncheckvulncheck.com/xdb/02f7b73ab684no verificadovulncheckvulncheck.com/xdb/5060de9f4f15no verificadovulncheckvulncheck.com/xdb/50a45f679975no verificadovulncheckvulncheck.com/xdb/9be1f64fbcd2no verificadovulncheckvulncheck.com/xdb/1620553c643ano verificadocve_referencepacketstormsecurity.com/files/160849/Apache-Flink-1.11.0-Arbitrary-File-Read-Directory-Traversal.htmlno verificadovulncheckvulncheck.com/xdb/1b1d6d820b0cno verificadovulncheckvulncheck.com/xdb/7c9fe2b962fdno verificadovulncheckvulncheck.com/xdb/7fe03bf0f0a6no verificadovulncheckvulncheck.com/xdb/a0b10abc1d63no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://packetstormsecurity.com/files/160849/Apache-Flink-1.11.0-Arbitrary-File-Read-Directory-Traversal.htmlhttps://lists.apache.org/thread.html/r0a433be10676f4fe97ca423d08f914e0ead341c901216f292d2bbe83%40%3Cissues.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3Ehttps://lists.apache.org/thread.html/r229167538863518738e02f4c1c5a8bb34c1d45dadcc97adf6676b0c1%40%3Cdev.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r26fcdd4fe288323006253437ebc4dd6fdfadfb5e93465a0e4f68420d%40%3Cuser-zh.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r28f17e564950d663e68cc6fe75756012dda62ac623766bb9bc5e7034%40%3Cissues.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r2fc60b30557e4a537c2a6293023049bd1c49fd92b518309aa85a0398%40%3Cissues.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r4e1b72bfa789ea5bc20b8afe56119200ed25bdab0eb80d664fa5bfe2%40%3Cdev.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r6843202556a6d0bce9607ebc02e303f68fc88e9038235598bde3b50d%40%3Cannounce.apache.org%3Ehttps://lists.apache.org/thread.html/r6843202556a6d0bce9607ebc02e303f68fc88e9038235598bde3b50d%40%3Cdev.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r6843202556a6d0bce9607ebc02e303f68fc88e9038235598bde3b50d%40%3Cuser.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r88b55f3ebf1f8f4e1cc61f030252aaef4b77060b56557a243abb92a1%40%3Cissues.flink.apache.org%3E