Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-39928

In Apache Linkis <= 1.5.0, a Random string security vulnerability in Spark EngineConn, random string generated by the Token when starting Py4j uses the Commons Lang's RandomStringUtils. Users are recommended to upgrade to version 1.6.0, which fixes this issue.

Published

2024-09-25T01:15:40.693

Last Modified

2025-05-16T20:27:25.980

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-326
  • Type: Secondary
    CWE-326
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application apache linkis < 1.6.0 Yes
References