S4E just found a high webmin panel detection scanner
high·Product Based Web Vulnerabilities·Updated Dec 16, 2023

CVE-2020-17518 Scanner

CVE-2020-17518 scanner - Path Traversal vulnerability in Apache Software Foundation Apache Flink

Est. Time~30 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
2.8k
Times Used
continuous scan runs
3.4k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2020-17518
7.5
CVSS

Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit a5264a6f41524afe8ceadf1d8ddc8c80f323ebc4 from apache/flink:master.

Attack Vector
-
Privileges Req.
-
User Interaction
-
Affected
Apache Flinkby Apache Software Foundation
Apache Flink 1.5.1 to 1.11.2
Updated Aug 21, 2026View on NVD →
Detail

Apache Flink is a powerful distributed computing framework designed to process large volumes of data. It is an open-source software that supports both batch and stream processing and boasts an incredibly fast processing speed. Apache Flink has become a popular tool in the data processing industry for its ability to handle complex data analytics tasks in a cost-effective and efficient manner.

CVE-2020-17518 is a vulnerability that was discovered in Apache Flink 1.5.1, which allows an attacker to upload and write arbitrary files to the server. This vulnerability is caused by a flaw in the software's REST handler, which fails to properly validate user input. This means that a malicious user could potentially execute unauthorized code on the server, leading to a range of serious consequences.

If exploited, this vulnerability could lead to the complete compromise of a server running Apache Flink 1.5.1, thereby exposing any sensitive information that the server may hold. This may include personally identifiable information, financial information, or other confidential data. Additionally, an attacker could use the compromised server to launch further attacks against other systems or networks.

In conclusion, it is essential to stay up-to-date with the latest vulnerabilities in all of your digital assets. With the pro features of the s4e.io platform, you can easily and quickly identify any potential vulnerabilities and take the necessary steps to protect your business and customers. Don't become a victim of cybercrime, stay informed and stay protected.

 

REFERENCES

Solution Advice

To protect against this vulnerability, the following precautions should be taken:

  • Upgrade to the latest version of Apache Flink (1.11.3 or 1.12.0).
  • If upgrading is not possible, apply the necessary patches to the existing installation.
  • Regularly conduct vulnerability assessments and penetration testing to detect and address any potential vulnerabilities.
  • Implement secure coding practices to mitigate any future vulnerabilities in the software.
  • Enforce strict access control policies to restrict unauthorised access to the server.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →
Similar Tools
high
Kedacom Network Keyboard Console Arbitrary File Read Scanner
→high
DedeCMS Local File Inclusion Vulnerability Scanner
→high
CVE-2021-46381 Scanner
→high
CVE-2012-1226 Scanner
→high
CVE-2018-9205 Scanner
→high
CVE-2026-33497 Scanner
→high
CVE-2021-39316 Scanner
→medium
CVE-2020-6950 Scanner
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

CVE-2020-17518 scanner - Path Traversal vulnerability in Apache Software Foundation Apache Flink S4E