Skip to content
OpenAdvisories

Package · Maven

org.apache.inlong:inlong

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.5
    CVE-2023-43666

    Apache InLong: General user Unauthorized access User Management

    Insufficient Verification of Data Authenticity vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0,  General user can view all user data like Admin account. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-…

    Apache Software Foundation Apache InLong org.apache.inlong:inlong Maven
  • High 7.5
    CVE-2023-43667

    Apache InLong: Log Injection in Global functions

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can create misleading or false log records, making it ha…

    Apache Software Foundation Apache InLong org.apache.inlong:inlong Maven
  • Critical 9.8
    CVE-2023-24997

    Apache InLong: Jdbc Connection Security Bypass

    Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inl…

    Apache Software Foundation Apache InLong org.apache.inlong:inlong Maven
  • High 7.5
    CVE-2023-24977

    Apache InLong: Jdbc Connection causes arbitrary file reading in InLong

    Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214 h…

    Apache Software Foundation Apache InLong org.apache.inlong:inlong Maven