Lucene search

K
cvelistApacheCVELIST:CVE-2023-31103
HistoryMay 22, 2023 - 3:13 p.m.

CVE-2023-31103 Apache InLong: Attackers can change the immutable name and type of cluster

2023-05-2215:13:30
CWE-668
apache
www.cve.org
5
cve-2023-31103
apache inlong
attackers
immutable name
type
cluster
vulnerability
apache software foundation
upgrade
patch
github

EPSS

0.002

Percentile

61.1%

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0.Β 
Attackers can change the immutable name and type of cluster of InLong.Β Users are advised to upgrade to Apache InLong’s 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891 to solve it.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache InLong",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "1.6.0",
        "status": "affected",
        "version": "1.4.0",
        "versionType": "semver"
      }
    ]
  }
]

EPSS

0.002

Percentile

61.1%

Related for CVELIST:CVE-2023-31103