Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-42966
HistoryMay 28, 2023 - 12:00 a.m.

Apache InLong Security Bypass Vulnerability

2023-05-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
apache inlong
security bypass
vulnerability
session expiration
attacker
system access

EPSS

0.003

Percentile

65.3%

Apache InLong is the United States Apache (Apache) Foundation’s one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.4.0 through 1.6.0, which stems from insufficient session expiration, and can be exploited by an attacker to reuse old sessions to access the system.

EPSS

0.003

Percentile

65.3%