Lucene search
ApacheCVELIST:CVE-2023-31062HistoryMay 22, 2023 - 3:47 p.m.
CVE-2023-31062 Apache InLong: Privilege escalation vulnerability for InLong
2023-05-2215:47:35
CWE-269
apache
www.cve.org
5
cve-2023-31062
apache inlong
privilege escalation
vulnerability
improper privilege management
upgrade
github pull request
Improper Privilege Management Vulnerabilities in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. When the attacker has access to a valid (but unprivileged) account, the exploit can be executed using Burp Suite by sending a login
request and following it with a subsequent HTTP request
using the returned cookie.
Users are advised to upgrade to Apache InLong’s 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7836 https://github.com/apache/inlong/pull/7836 to solve it.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Apache InLong",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThanOrEqual": "1.6.0",
"status": "affected",
"version": "1.2.0",
"versionType": "semver"
}
]
}
]Related
veracode
veracode
Privilege Escalation
2023-05-26 03:54:07
nvd
nvd
CVE-2023-31062
2023-05-22 16:15:09
osv
osv
Apache InLong Improper Privilege Management vulnerability
2023-07-06 21:14:59
CVE-2023-31062
2023-05-22 16:15:09
github
github
Apache InLong Improper Privilege Management vulnerability
2023-07-06 21:14:59
prion
prion
Input validation
2023-05-22 16:15:00
cve
cve
CVE-2023-31062
2023-05-22 16:15:09