CVE-2025-29847: Apache Linkis: Arbitrary File Read via Double URL Encoding Bypass
A vulnerability in Apache Linkis.
Problem Description
When using the JDBC engine and data source functionality, if the URL parameter configured on the frontend has undergone multiple rounds of URL encoding, it may bypass the system's checks. This bypass can trigger a vulnerability that allows unauthorized access to system files via JDBC parameters.
Scope of Impact
This issue affects Apache Linkis: from 1.3.0 through 1.7.0.
Severity level
moderate Solution Continuously check if the connection information contains the "%" character; if it does, perform URL decoding.
Users are recommended to upgrade to version 1.8.0, which fixes the issue.
More questions about this vulnerability can be discussed here: https://lists.apache.org/list?dev@linkis.apache.org:2025-9:cve
Other sources
A vulnerability in Apache Linkis.
Problem Description When using the JDBC engine and da When using the JDBC engine and data source functionality, if the URL parameter configured on the frontend has undergone multiple rounds of URL encoding, it may bypass the system's checks. This bypass can trigger a vulnerability that allows unauthorized access to system files via JDBC parameters.
Scope of Impact
This issue affects Apache Linkis: from 1.3.0 through 1.7.0.
Severity level
moderate Solution Continuously check if the connection information contains the "%" character; if it does, perform URL decoding.
Users are recommended to upgrade to version 1.8.0, which fixes the issue.
More questions about this vulnerability can be discussed here: https://lists.apache.org/list?dev@linkis.apache.org:2025-9:cve
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-29847?
CVE-2025-29847 is considered a critical vulnerability due to its potential for arbitrary file reading.
How do I fix CVE-2025-29847?
To mitigate CVE-2025-29847, upgrade to Apache Linkis version 1.8.0 or later.
What systems are affected by CVE-2025-29847?
CVE-2025-29847 affects Apache Linkis versions from 1.3.0 to 1.7.0.
What type of attack does CVE-2025-29847 facilitate?
CVE-2025-29847 allows an attacker to bypass restrictions and read arbitrary files through double URL encoding.
What components of Apache Linkis are impacted by CVE-2025-29847?
CVE-2025-29847 specifically impacts the JDBC engine and data source functionality in Apache Linkis.