Lucene search

PRIOn knowledge basePRION:CVE-2023-51785

HistoryJan 03, 2024 - 10:15 a.m.

Deserialization of untrusted data

2024-01-0310:15:00

PRIOn knowledge base

www.prio-n.com

deserialization vulnerability

apache inlong

arbitrary file read

mysql driver

upgrade

nvd

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

JSON

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong’s 1.10.0 or cherry-pick [1] to solve it.

[1] https://github.com/apache/inlong/pull/9331

CPENameOperatorVersion
inlongge1.7.0
inlongle1.9.0

CPE	Name	Operator	Version
	inlong	ge	1.7.0
	inlong	le	1.9.0

References

www.openwall.com/lists/oss-security/2024/01/03/2

lists.apache.org/thread/g0yjmtjqvp8bnf1j0tdsk0nhfozjdjno