{"schema_version": "1.6.1", "id": "CVE-2024-27181", "summary": "Privilege Escalation Attack vulnerability", "details": "\nIn Apache Linkis <= 1.5.0,\n\nPrivilege Escalation in Basic management services where the attacking user is \n\na trusted account\n\n allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "1.3.2"}, {"fixed": "1.6.0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/hosd73l7hxb3rpt5rb0yg0ld11zph4c6"}]}