Apache InLong Deserialization Vulnerability (CNVD-2023-93323)

2023-10-2300:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache inlong

deserialization vulnerability

data integration

secure

data transfer

code execution

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

45.7%

JSON

Apache InLong is the U.S. Apache (Apache) Foundation’s one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. Apache InLong has a deserialization vulnerability that originates from unsafe deserialization processing of serialized data received by the application from a user, which can be exploited by an attacker to cause code execution.