Lucene search
+L

48 matches found

CNNVD
CNNVD
added 2023/10/16 12:0 a.m.4 views

Apache InLong SQL Injection Vulnerability

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. It provides automated, secure, and reliable data transfer capabilities. An injection vulnerability exists in Apache InLong versions 1.4.0 through 1.8.0 that stems from incorrect neutralization of...

7.5CVSS7.3AI score0.01226EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/07/25 12:0 a.m.12 views

PT-2023-25137 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.4.0 through 1.7.0 Description: The issue is related to an SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This occurs in the toAuditCkSql method where the groupId...

9.8CVSS7.7AI score0.01643EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2023/05/22 12:0 a.m.4 views

PT-2023-23156 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.5.0 through 1.6.0 Description: This issue allows users registered in InLong who joined later to see deleted users' data. The problem is related to insecure default initialization of resources. Recommendations: For...

6.5CVSS6.2AI score0.0111EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/05/22 12:0 a.m.4 views

Apache InLong 安全漏洞

Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.4.0 through 1.6.0. The vulnerability is caused due to a resource being exposed to the wrong sphere flaw. An attacker can...

7.5CVSS6.8AI score0.01247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/05/21 12:0 a.m.3 views

PT-2023-8730 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.4.0 through 1.6.0 Description: The issue is related to the use of files and directories accessible to external parties, which can be exploited by a remote attacker to execute arbitrary code. Different users in InLong...

9.1CVSS7.5AI score0.01355EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/02/01 12:0 a.m.5 views

PT-2023-19850 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.1.0 through 1.5.0 Description: The issue is an Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong. Users are advised to upgrade to Apache InLong's latest version or cherry-pick a specific pat...

7.5CVSS7.2AI score0.0116EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2022/10/10 12:0 a.m.7 views

The vulnerability of the JDBC platform integration data processing server Apache InLong’s URL address handler allows a attacker to execute arbitrary code.

The vulnerability of the JDBC URL connection handler of the Apache InLong data integration platform is related to the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8AI score0.02223EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
added 2022/09/20 12:0 a.m.19 views

Apache InLong 代码问题漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. A deserialization vulnerability exists in Apache InLong versions prior to 1.3.0, which arises from unsafe deserialization of...

8.8CVSS6.9AI score0.02223EPSS
SaveExploits0References3
Rows per page
Query Builder