Lucene search
GoogleOSV:CVE-2023-31065HistoryMay 22, 2023 - 4:15 p.m.
CVE-2023-31065
2023-05-2216:15:10
Google
osv.dev
3
apache inlong
session expiration
vulnerability
upgrade
github
patch
Insufficient Session Expiration vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0.
An old session can be used by an attacker even after the user has been deleted or the password has been changed.
Users are advised to upgrade to Apache InLong’s 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7836 https://github.com/apache/inlong/pull/7836 , https://github.com/apache/inlong/pull/7884 https://github.com/apache/inlong/pull/7884 to solve it.
Related
veracode
veracode
Session Fixation
2023-05-26 05:04:11
cve
cve
CVE-2023-31065
2023-05-22 16:15:10
osv
osv
Apache InLong Insufficient Session Expiration vulnerability
2023-07-06 21:14:59
cvelist
cvelist
CVE-2023-31065 Apache InLong: Insufficient Session Expiration in InLong
2023-05-22 15:40:56
cnvd
cnvd
Apache InLong Security Bypass Vulnerability
2023-05-28 00:00:00
prion
prion
Session fixation
2023-05-22 16:15:00
huntr
huntr
Insufficient Session Expiration
2023-04-02 03:24:14
github
github
Apache InLong Insufficient Session Expiration vulnerability
2023-07-06 21:14:59
nvd
nvd
CVE-2023-31065
2023-05-22 16:15:10