Lucene search
+L

434 matches found

CNVD
CNVD
added 2023/04/14 12:0 a.m.67 views

Apache InLong SQL Injection Vulnerability

Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. Apache InLong suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to view, add, modify, or delete information in a back-end database...

5.3CVSS7.7AI score0.01164EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/11 3:15 p.m.13 views

CVE-2023-30465

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the "orderType" parameter and the ordering of the returned content using an SQL...

5.3CVSS6.1AI score0.01164EPSS
SaveExploits0References2
NVD
NVD
added 2023/04/11 3:15 p.m.30 views

CVE-2023-30465

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the "orderType" parameter and the ordering of the returned content using an SQL...

5.3CVSS5.9AI score0.01164EPSS
SaveExploits0References2
Prion
Prion
added 2023/04/11 3:15 p.m.21 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the "orderType" parameter and the ordering of the returned content using an SQL...

5CVSS5.8AI score0.01164EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/04/11 2:35 p.m.30 views

CVE-2023-30465 Apache InLong: SQL injection in apache inLong 1.5.0

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the "orderType" parameter and the ordering of the returned content using an SQL...

6.2AI score0.01164EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/04/11 2:35 p.m.12 views

CVE-2023-30465 Apache InLong: SQL injection in apache inLong 1.5.0

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the "orderType" parameter and the ordering of the returned content using an SQL...

5.8AI score0.01164EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/11 12:0 a.m.14 views

Apache InLong SQL注入漏洞

Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. Apache InLong suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to view, add, modify, or delete information in a back-end database...

5.3CVSS7.7AI score0.01164EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/10 12:0 a.m.8 views

The vulnerability of the Apache InLong data integration platform, related to the recovery of unreliable data in memory, allows attackers to compromise privacy, integrity, and accessibility of the data.

The vulnerability of the Apache InLong data integration platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to compromise privacy, integrity, and accessibility of the data...

10CVSS7.8AI score0.01409EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2023/03/29 12:0 a.m.68 views

Apache InLong Deserialization Vulnerability (CNVD-2023-25936)

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. A deserialization vulnerability exists in Apache InLong versions 1.1.0 to 1.5.0. The vulnerability stems from unsafe deserializatio...

8.8CVSS8.7AI score0.01475EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/27 3:30 p.m.72 views

GHSA-GPQQ-59RP-3C3W Apache InLong vulnerable to JDBC Deserialization of Untrusted Data

Apache InLong versions from 1.1.0 through 1.5.0 are vulnerable to Java Database Connectivity JDBC deserialization of untrusted data from the MySQL JDBC URL in MySQLDataNode. It could be triggered by authenticated users of InLong. This has been patched in version 1.6.0. Users are advised to upgrad...

8.8CVSS8.5AI score0.01475EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2023/03/27 3:30 p.m.35 views

Apache InLong vulnerable to JDBC Deserialization of Untrusted Data

Apache InLong versions from 1.1.0 through 1.5.0 are vulnerable to Java Database Connectivity JDBC deserialization of untrusted data from the MySQL JDBC URL in MySQLDataNode. It could be triggered by authenticated users of InLong. This has been patched in version 1.6.0. Users are advised to upgrad...

8.8CVSS8.2AI score0.01475EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/03/27 3:15 p.m.29 views

CVE-2023-27296

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong. It could be triggered by authenticated users of InLong, you could refer to 1 to know more about this vulnerability. This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade...

8.8CVSS8.8AI score0.01475EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/27 3:15 p.m.39 views

CVE-2023-27296

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong. It could be triggered by authenticated users of InLong, you could refer to 1 to know more about this vulnerability. This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade...

8.8CVSS8.6AI score0.01475EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/27 3:15 p.m.20 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong. It could be triggered by authenticated users of InLong, you could refer to 1 to know more about this vulnerability. This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade...

6.5CVSS8.5AI score0.01475EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/03/27 2:10 p.m.85 views

CVE-2023-27296

CVE-2023-27296 affects Apache InLong versions 1.1.0–1.5.0. The root cause is unsafe deserialization of untrusted data in the JDBC flow (notably MySQLDataNode), enabling potential code execution. Impact is high (CVSS 3.1 base score 8.8; Confidentiality, Integrity, Availability all High). A fix exi...

8.8CVSS8.6AI score0.01475EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/27 2:10 p.m.49 views

CVE-2023-27296 Apache InLong: JDBC Deserialization Vulnerability in InLong

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong. It could be triggered by authenticated users of InLong, you could refer to 1 to know more about this vulnerability. This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade...

8.8AI score0.01475EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/03/27 2:10 p.m.11 views

CVE-2023-27296 Apache InLong: JDBC Deserialization Vulnerability in InLong

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong. It could be triggered by authenticated users of InLong, you could refer to 1 to know more about this vulnerability. This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade...

6.6AI score0.01475EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/03/27 12:0 a.m.4 views

PT-2023-21058 · Oracle +1 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.1.0 through 1.5.0 Description: The issue is related to the deserialization of untrusted data in Apache InLong, which could be triggered by authenticated users. This vulnerability affects the MySQLDataNode due to the...

8.8CVSS6.6AI score0.01475EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2023/03/27 12:0 a.m.7 views

Apache InLong 代码问题漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. A deserialization vulnerability exists in Apache InLong versions 1.1.0 to 1.5.0. The vulnerability stems from unsafe deserializatio...

8.8CVSS7.5AI score0.01475EPSS
SaveExploits0References3
CNVD
CNVD
added 2023/02/06 12:0 a.m.68 views

Apache InLong Deserialization Vulnerability (CNVD-2023-25934)

Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. Apache InLong suffers from a deserialization vulnerability that can be exploited by a remote attacker to submit a special request and execute arbitrary code in the application context...

9.8CVSS9.6AI score0.01409EPSS
SaveExploits0References1
Rows per page
Query Builder