CVE-2023-35088

creationtimestamp| type| source ---|---|--- 2023-07-25 12:28:24+00:00| published-proof-of-concept| https://t.me/cibsecurity/67226 2025-02-13 19:18:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4322...

CVE-2023-35088

Improper Neutralization of Special Elements Used in an SQL Command 'SQL Injection' vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. In the toAuditCkSql method, the groupId, streamId, auditId, and dt are directly concatenated int...

CVE-2023-35088

Improper Neutralization of Special Elements Used in an SQL Command 'SQL Injection' vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. In the toAuditCkSql method, the groupId, streamId, auditId, and dt are directly concatenated int...

CVE-2023-35088 Apache InLong: SQL injection in audit endpoint

Improper Neutralization of Special Elements Used in an SQL Command 'SQL Injection' vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. In the toAuditCkSql method, the groupId, streamId, auditId, and dt are directly concatenated int...

CVE-2023-35088

CVE-2023-35088 affects Apache InLong versions 1.4.0–1.7.0. The root cause is in the toAuditCkSql method, where groupId, streamId, auditId, and dt are directly concatenated into the SQL query, enabling SQL injection. The vulnerability can impact confidentiality, integrity, and availability (CVSS v...