Deserialization Of Untrusted Data

org.apache.inlong, manager-pojo is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to improper handling and validation of serialized data, allows attackers to inject malicious data that the system trusts and processes. Note: Specially due to secondary mining bypass for...

Apache InLong: JDBC Vulnerability during verification processing

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it. 1...

CVE-2025-27522

The Apache InLong data integration framework versions 1.13.0 through 2.1.0 are vulnerable to a security bypass caused by the deserialization of untrusted data . This vulnerability is identified as a secondary mining bypass for CVE-2024-26579 . Exploitation of this flaw can allow a remote attacker...

CVE-2025-27522 Apache InLong: JDBC Vulnerability during verification processing

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it. 1...

CVE-2024-26579

creationtimestamp| type| source ---|---|--- 2025-05-28 01:35:05+00:00| seen| https://seclists.org/oss-sec/2025/q2/171...

CVE-2025-27522: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it. 1...

CVE-2024-26579

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.11.0, the attackers can bypass using malicious parameters. Users are advised to upgrade to Apache InLong's 1.12.0 or cherry-pick 1, 2 to solve it. 1...

CVE-2024-26579

CVE-2024-26579 is a Deserialization of Untrusted Data vulnerability in Apache InLong affecting 1.7.0–1.11.0. It can allow high-impact access to confidentiality, integrity, and availability (CVSS v3.1: 9.8). Remediation: upgrade to InLong 1.12.0 or cherry-pick PRs 9694 and 9707 as fix paths. Explo...

CVE-2024-26579 Apache Inlong JDBC Vulnerability

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.11.0, the attackers can bypass using malicious parameters. Users are advised to upgrade to Apache InLong's 1.12.0 or cherry-pick 1, 2 to solve it. 1...

CVE-2024-26579: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.11.0, the attackers can bypass using malicious parameters. Users are advised to upgrade to Apache InLong's 1.12.0 or cherry-pick 1, 2 to solve it. 1...