Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-27526 EUVD-2025-16301GHSA-532x-j9r7-8f73

Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass

Published May 28, 2025 · Updated May 28, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache InLong Package: org.apache.inlong:manager-pojo Ecosystem: Maven

Description

Deserialization of Untrusted Data vulnerability in Apache InLong.

This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.

[1]  https://github.com/apache/inlong/pull/11747

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache InLong 1.13 – ≤ 2.1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.inlong:manager-pojo >= 1.13.0, < 2.2.0 2.2.0 GHSA-532x-j9r7-8f73

References