CVE-2023-46801

CVE-2023-46801 is a critical remote code execution (RCE) vulnerability affecting Apache Linkis versions up to 1.5.0, specifically within its data source management module when adding MySQL data sources. This deserialization vulnerability, exploitable via JRMP, allows an authenticated attacker to inject and execute malicious files on the server. With a CVSS score of 8.8 (High), successful exploitation grants high confidentiality, integrity, and availability impacts, though it requires prior authentication and a Java version older than 1.8.0_241. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.