Lucene search
+L

561 matches found

Github Security Blog
Github Security Blog
•added 2024/01/03 12:30 p.m.•44 views

Apache InLong Manager Remote Code Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1...

9.8CVSS9.7AI score0.0162EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2024/01/03 12:30 p.m.•54 views

GHSA-9XG9-HH45-XCM6 Apache InLong Manager Remote Code Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1...

9.8CVSS9.7AI score0.0162EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2024/01/03 12:30 p.m.•67 views

Apache InLong Manager Arbitrary File Read Vulnerability

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

7.5CVSS7.4AI score0.01012EPSS
SaveExploits0References6Affected Software1
osv_cve
osv_cve
•added 2024/01/03 10:15 a.m.•23 views

CVE-2023-51785

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

7.5CVSS5.9AI score0.01012EPSS
SaveExploits0References2
NVD
NVD
•added 2024/01/03 10:15 a.m.•52 views

CVE-2023-51785

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

7.5CVSS7.5AI score0.01012EPSS
SaveExploits0References2
NVD
NVD
•added 2024/01/03 10:15 a.m.•38 views

CVE-2023-51784

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1...

9.8CVSS9.7AI score0.0162EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/01/03 10:15 a.m.•17 views

CVE-2023-51784

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1...

9.8CVSS5.8AI score0.0162EPSS
SaveExploits0References2
Prion
Prion
•added 2024/01/03 10:15 a.m.•22 views

Code injection

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1...

7.5CVSS7.5AI score0.0162EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2024/01/03 10:15 a.m.•27 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

5CVSS7.1AI score0.01012EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2024/01/03 9:39 a.m.•3 views

CVE-2023-51784

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1...

9.8CVSS0.0162EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/01/03 9:39 a.m.•37 views

CVE-2023-51784 Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1...

9.9AI score0.0162EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/01/03 9:39 a.m.•11 views

CVE-2023-51784 Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1...

9.7AI score0.0162EPSS
SaveExploits0References2
CVE
CVE
•added 2024/01/03 9:39 a.m.•101 views

CVE-2023-51784

The CVE-2023-51784 entry describes an Improper Control of Generation of Code (Code Injection) vulnerability in Apache InLong Manager affecting InLong versions 1.5.0–1.9.0. Root cause is code injection allowing remote code execution. Impact per sources is high/critical (RCE) with network access an...

9.8CVSS9.7AI score0.0162EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/01/03 9:36 a.m.•51 views

CVE-2023-51785 Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

7.6AI score0.01012EPSS
SaveExploits0References2
CVE
CVE
•added 2024/01/03 9:36 a.m.•87 views

CVE-2023-51785

Summary: CVE-2023-51785 affects Apache InLong (Manager) versions 1.7.0–1.9.0. The issue is a deserialization of untrusted data flaw that enables an arbitrary file read via the MySQL driver. Root cause and impact are described as a deserialization vulnerability enabling file reads; no exploitation...

7.5CVSS7.3AI score0.01012EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/03 9:36 a.m.•12 views

CVE-2023-51785 Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

7.4AI score0.01012EPSS
SaveExploits0References2
Mend
Mend
•added 2024/01/03 9:36 a.m.•7 views

CVE-2023-51785

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

8.7CVSS0.01012EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/01/03 12:00 a.m.•15 views

Apache InLong 代码注入漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. A code injection vulnerability exists in Apache InLong versions 1.5.0 through 1.9.0, which stems from the presence of a code...

9.8CVSS7.7AI score0.0162EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/03 12:00 a.m.•4 views

CVE-2023-51785: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

7.5CVSS7.3AI score0.01012EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/03 12:00 a.m.•22 views

Apache InLong 代码问题漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. Apache InLong has a code issue vulnerability that stems from the presence of a deserialization vulnerability. An attacker can explo...

7.5CVSS7.3AI score0.01012EPSS
SaveExploits0References3
Rows per page
Query Builder