PT-2021-10096 · Apache · Apache Flink

0Rich1 + 1 · CVE-2020-17518 · Published 2021-01-05 · Updated 2024-03-06

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Apache Flink versions 1.5.1

Description: A REST handler in Apache Flink allows writing an uploaded file to any location on the local file system through a maliciously modified HTTP HEADER. This issue enables files to be written to any location accessible by the software.

Recommendations: For Apache Flink version 1.5.1, upgrade to Flink 1.11.3 or 1.12.0, especially if the Flink instance is exposed.

Exploit

Fix

Relative Path Traversal

Path traversal

Weakness Enumeration

CWE-23

CWE-22

Related Identifiers

BIT-FLINK-2020-17518

CVE-2020-17518

GHSA-7Q5G-GPH2-4RC6

Affected Products

Apache Flink

References · 63

• 🔥 https://github.com/QmF0c3UK/CVE-2020-17518 · Exploit
• 🔥 https://github.com/murataydemir/CVE-2020-17518 · Exploit
• 🔥 https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7@%3Cannounce.apache.org%3E · Exploit
• https://osv.dev/vulnerability/BIT-flink-2020-17518 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7q5g-gph2-4rc6 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-17518 · Vendor Advisory
• https://lists.apache.org/thread.html/rb43cd476419a48be89c1339b527a18116f23eec5b6df2b2acbfef261%40%3Cdev.flink.apache.org%3E · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-17518 · Security Note
• https://github.com/apache/flink/commit/a5264a6f41524afe8ceadf1d8ddc8c80f323ebc4 · Note
• https://lists.apache.org/thread.html/r229167538863518738e02f4c1c5a8bb34c1d45dadcc97adf6676b0c1%40%3Cdev.flink.apache.org%3E · Note
• https://lists.apache.org/thread.html/r7b2ee88c66fc1d0823e66475631f5c3e7f0365204ff0cb094d9f2433%40%3Cissues.flink.apache.org%3E · Note
• https://lists.apache.org/thread.html/rd2467344f88bcaf108b8209ca92da8ec393c68174bfb8c27d1e20faa@%3Cdev.flink.apache.org%3E · Note
• https://lists.apache.org/thread.html/ra8c96bf3ccb4e491f9ce87ba35f134b4449beb2a38d1ce28fd89001f@%3Cdev.flink.apache.org%3E · Note
• https://lists.apache.org/thread.html/rf8812a5703f4a5f1341138baf239258b250875699732cfdf9d55b21d%40%3Cissues.flink.apache.org%3E · Note
• https://lists.apache.org/thread.html/rcb9e8af775f2a3706b69153aefde78f208871649df057c70ce2e24f9@%3Cissues.flink.apache.org%3E · Note