Apache InLong Code Issue Vulnerability (CNVD-2024-08088)

2024-01-0900:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache inlong

deserialization vulnerability

arbitrary file reads

mysql driver

security issue

7.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.7%

JSON

Apache InLong is the U.S. Apache (Apache) Foundation’s one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. Apache InLong has a code issue vulnerability that stems from the presence of a deserialization vulnerability. An attacker can exploit this vulnerability to perform arbitrary file reads using the mysql driver.

CPENameOperatorVersion
apache inlong >=1.7.0，le1.9.0

CPE	Name	Operator	Version
	apache inlong >=1.7.0，	le	1.9.0