org.apache.inlong:manager-pojo

6 results · Clear filters · Feed

• High 7.5
  CVE-2023-51785

  Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager

  Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cher…

  Apache Software Foundation Apache InLong org.apache.inlong:manager-pojo Maven
  Jan 3, 2024
• High 7.5
  CVE-2023-46227

  Apache inlong has an Arbitrary File Read Vulnerability

  Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can use \t to bypass. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1…

  Apache Software Foundation Apache InLong org.apache.inlong:manager-pojo org.apache.inlong:manager-common Maven
  Oct 19, 2023
• High 7.5
  CVE-2023-34434

  Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param

  Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0.  The attacker could bypass the current logic and achieve arbitrary file reading. To solve it, users are adv…

  Apache Software Foundation Apache InLong org.apache.inlong:manager-pojo Maven
  Jul 25, 2023
• High 7.5
  CVE-2023-31103

  Apache InLong: Attackers can change the immutable name and type of cluster

  Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0.  Attackers can change the immutable name and type of cluster of InLong. Users are advised to upgrade to …

  Apache Software Foundation Apache InLong org.apache.inlong:manager-pojo org.apache.inlong:manager-service Maven
  May 22, 2023
• High 7.5
  CVE-2023-31206

  Apache InLong: Attackers can change the immutable name and type of nodes

  Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of nodes of InLong. Users are advised to upgrade to Apa…

  Apache Software Foundation Apache InLong org.apache.inlong:manager-pojo org.apache.inlong:manager-service Maven
  May 22, 2023
• High 7.5
  CVE-2023-31058

  Apache InLong: JDBC URL bypassing by adding blanks

  Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers would bypass the 'autoDeserialize' option filtering by adding blanks. Users are advised to upgrad…

  Apache Software Foundation Apache InLong org.apache.inlong:manager-pojo org.apache.inlong:manager-common Maven
  May 22, 2023