Lucene search
GoogleOSV:GHSA-FGH3-PWMP-3QW3HistoryMay 08, 2024 - 3:30 p.m.
Apache Inlong Deserialization of Untrusted Data vulnerability
2024-05-0815:30:42
Google
osv.dev
2
apache inlong
deserialization vulnerability
untrusted data
Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.7.0 through 1.11.0. The attackers can bypass using malicious parameters.
Users are advised to upgrade to Apache InLong’s 1.12.0 or cherry-pick [1], [2] to solve it.
References
github.com/advisories/GHSA-fgh3-pwmp-3qw3
github.com/apache/inlong
github.com/apache/inlong/commit/23e3e00cae1fd120b089fca54f7440945dfe11a4
github.com/apache/inlong/commit/cdf616670942fec7d09fae2452e2ea215205dd1d
github.com/apache/inlong/pull/9694
github.com/apache/inlong/pull/9707
lists.apache.org/thread/d2hndtvh6bll4pkl91o2oqxyynhr54k3
nvd.nist.gov/vuln/detail/CVE-2024-26579
Related
cve
cve
CVE-2024-26579
2024-05-08 15:15:08
vulnrichment
vulnrichment
CVE-2024-26579 Apache Inlong JDBC Vulnerability
2024-05-08 15:06:23
github
github
Apache Inlong Deserialization of Untrusted Data vulnerability
2024-05-08 15:30:42
veracode
veracode
Deserialization Of Untrusted Data
2024-05-09 05:50:47
cvelist
cvelist
CVE-2024-26579 Apache Inlong JDBC Vulnerability
2024-05-08 15:06:23
nvd
nvd
CVE-2024-26579
2024-05-08 15:15:08