CVE-2020-17519 Scanner
CVE-2020-17519 scanner - Directory Traversal vulnerability in Apache Software Foundation Apache Flink
Used 2.8k times · 3.4k assets checked · url
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2020-17519
7.5
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit b561010b0ee741543c3953306037f00d7a9f0801 from apache/flink:master.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
apache flinkflink
Updated Oct 12, 2026View on NVD →
S4E scanner
CVE history: apache flink
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →