CVE-2023-41916, CVE-2023-46801, and CVE-2023-49566, could allow attackers to read arbitrary files, execute remote code, and perform JNDI injection attacks
Apache Linkis
Discoveries have exposed several important security vulnerabilities in Apache Linkis that need to be addressed in order to ensure the continued safety
The bug exists in the JDBC EngineConn module, an attacker could exploit CVE-2022-39944 to deserialize and thus achieve remote code execution