KEVIntel

Vulnerability detail

Enriched intelligence for a single CVE

Back to KEVs

7.5

CVSS
High

CVE-2020-17519

PUBLISHED

Apache Flink directory traversal attack: reading remote files through the REST API

Exploited in the wild Remote Low complexity No user interaction

Vendor: Apache Software Foundation
Product: Apache Flink
Published: Jan 05, 2021
EPSS: —

Description

A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit b561010b0ee741543c3953306037f00d7a9f0801 from apache/flink:master.

apache cisa nuclei_scanner nessus_scanner

CVSS scores

CVSS v3.1 7.5 High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 5.0

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitation status

Exploited in the wild

Recorded 2024-05-23 00:00:00 UTC · Source

SSVC decision points

Exploitation: active
Automatable: Yes
Technical impact: partial

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
CISA	May 23, 2024

Scanner integrations

Scanner	Reference	Detected
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17519.yaml	Apr 25, 2025
Nessus	https://www.tenable.com/plugins/nessus/146314	Mar 08, 2023