Lucene search
PRIOn knowledge basePRION:CVE-2023-30465HistoryApr 11, 2023 - 3:15 p.m.
Sql injection
2023-04-1115:15:00
PRIOn knowledge base
www.prio-n.com
2
sql injection
apache inlong
apache software foundation
vulnerability
parameter manipulation
username extraction
update
cherry-pick
Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the “orderType” parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the user with ID 1 from the “user” table, one character at a time. Users are advised to upgrade to Apache InLong’s 1.6.0 or cherry-pick [1] to solve it.
https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html
[1] https://github.com/apache/inlong/issues/7529 https://github.com/apache/inlong/issues/7529
Related
osv
osv
CVE-2023-30465
2023-04-11 15:15:10
Apache InLong SQL Injection vulnerability
2023-07-06 19:24:14
cvelist
cvelist
CVE-2023-30465 Apache InLong: SQL injection in apache inLong 1.5.0
2023-04-11 14:35:11
veracode
veracode
SQL Injection
2023-04-12 09:29:07
cve
cve
CVE-2023-30465
2023-04-11 15:15:10
nvd
nvd
CVE-2023-30465
2023-04-11 15:15:10
cnvd
cnvd
Apache InLong SQL Injection Vulnerability
2023-04-14 00:00:00
github
github
Apache InLong SQL Injection vulnerability
2023-07-06 19:24:14