Lucene search
GoogleOSV:CVE-2023-27296HistoryMar 27, 2023 - 3:15 p.m.
CVE-2023-27296
2023-03-2715:15:08
Google
osv.dev
5
apache inlong
deserialization
vulnerability
upgrade
Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.
It could be triggered by authenticated users of InLong, you could refer to [1] to know more about this vulnerability.
This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong’s latest version or cherry-pick [2] to solve it.
[1] https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html
https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html
[2] https://github.com/apache/inlong/pull/7422 https://github.com/apache/inlong/pull/7422
Related
cnvd
cnvd
Apache InLong Deserialization Vulnerability (CNVD-2023-25936)
2023-03-29 00:00:00
github
github
Apache InLong vulnerable to JDBC Deserialization of Untrusted Data
2023-03-27 15:30:16
cvelist
cvelist
CVE-2023-27296 Apache InLong: JDBC Deserialization Vulnerability in InLong
2023-03-27 14:10:32
cve
cve
CVE-2023-27296
2023-03-27 15:15:08
prion
prion
Deserialization of untrusted data
2023-03-27 15:15:00
osv
osv
Apache InLong vulnerable to JDBC Deserialization of Untrusted Data
2023-03-27 15:30:16
veracode
veracode
Deserialization Of Untrusted Data
2023-03-28 04:13:41
nvd
nvd
CVE-2023-27296
2023-03-27 15:15:08