CVE-2020-17518
Apache Flink directory traversal attack: remote file writing through the REST API
- State
- Published
- Severity
- Not scored
- Published
- Jan 5, 2021
- Updated
- Feb 13, 2025
- Reserved
- Aug 12, 2020
Description
Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit a5264a6f41524afe8ceadf1d8ddc8c80f323ebc4 from apache/flink:master.
Scores
The record has no CVSS score.
Weaknesses
- CWE-23 Relative Path Traversal
Affected Products
| Product | Versions |
|---|---|
Apache FlinkApache Software Foundation |
|
References
- https://lists.apache.org/thread.html/rb43cd476419a48be89c1339b527a18116f23eec5b6df2b2acbfef261%40%3Cdev.flink.apache.org%3E
- [flink-user] 20210105 [CVE-2020-17518] Apache Flink directory traversal attack: remote file writing through the REST APImailing-list
- [announce] 20210105 [CVE-2020-17518] Apache Flink directory traversal attack: remote file writing through the REST APImailing-list
- [oss-security] 20210105 [CVE-2020-17518] Apache Flink directory traversal attack: remote file writing through the REST APImailing-list
- [flink-issues] 20210106 [GitHub] [flink-web] zentol commented on a change in pull request #408: Add security page for Flinkmailing-list
- [flink-dev] 20210106 [jira] [Created] (FLINK-20875) Could patch CVE-2020-17518 to version 1.10mailing-list
- [flink-issues] 20210106 [jira] [Created] (FLINK-20875) Could patch CVE-2020-17518 to version 1.10mailing-list
- [flink-issues] 20210107 [jira] [Updated] (FLINK-20875) Could patch CVE-2020-17518 to version 1.10mailing-list
- [flink-issues] 20210107 [jira] [Closed] (FLINK-20875) Could patch CVE-2020-17518 to version 1.10mailing-list
- [flink-issues] 20210107 [jira] [Commented] (FLINK-20875) Could patch CVE-2020-17518 to version 1.10mailing-list
- [flink-issues] 20210112 [jira] [Commented] (FLINK-20875) Could patch CVE-2020-17518 to version 1.10mailing-list
- [flink-dev] 20210113 Re: [DISCUSS] Releasing Apache Flink 1.10.3mailing-list
- [flink-issues] 20210114 [jira] [Reopened] (FLINK-20875) Could patch CVE-2020-17518 to version 1.10mailing-list
- [flink-issues] 20210114 [jira] [Commented] (FLINK-20875) Could patch CVE-2020-17518 to version 1.10mailing-list
- [flink-issues] 20210114 [jira] [Closed] (FLINK-20875) Could patch CVE-2020-17518 to version 1.10mailing-list
- [flink-issues] 20210114 [jira] [Updated] (FLINK-20875) Could patch CVE-2020-17518 to version 1.10mailing-list
- [flink-issues] 20210114 [jira] [Comment Edited] (FLINK-20875) Could patch CVE-2020-17518 to version 1.10mailing-list
- [flink-issues] 20210114 [jira] [Updated] (FLINK-20875) [CVE-2020-17518] Directory traversal attack: remote file writing through the REST APImailing-list
- [flink-issues] 20210114 [jira] [Commented] (FLINK-20875) [CVE-2020-17518] Directory traversal attack: remote file writing through the REST APImailing-list
- [flink-dev] 20210115 Re: [DISCUSS] Releasing Apache Flink 1.10.3mailing-list
- [flink-dev] 20210121 Re: [VOTE] Release 1.10.3, release candidate #1mailing-list
- [announce] 20210125 Apache Software Foundation Security Report: 2020mailing-list
- [announce] 20210223 Re: Apache Software Foundation Security Report: 2020mailing-list
- https://lists.apache.org/thread.html/r26fcdd4fe288323006253437ebc4dd6fdfadfb5e93465a0e4f68420d%40%3Cuser-zh.flink.apache.org%3E
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.