Shulou(Shulou.com)06/01 Report--

This article mainly introduces how to reproduce the remote code execution vulnerability caused by uploading any Jar package in Apache Flink. The article is very detailed and has a certain reference value. Interested friends must finish reading it!

Vulnerability description

Apache Flink is an open source platform for distributed streams and batch data. The core of Flink is a streaming data streaming engine, which provides data distribution, communication and fault tolerance for distributed computing on data streams. Flink builds batches on top of the flow engine, covering local iteration support, managed memory, and program optimization. Recently, security researchers have found that apache flink allows arbitrary jar packages to be uploaded, resulting in remote code execution.

Vulnerability level

High risk

Scope of influence

Apache Flink

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.