Lucene search
+L

404 matches found

RedhatCVE
RedhatCVE
added 2025/05/30 8:56 a.m.23 views

CVE-2025-27522

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it. 1...

9.8CVSS6.8AI score0.0113EPSS
SaveExploits0References1
Veracode
Veracode
added 2025/05/29 5:30 a.m.13 views

Deserialization Of Untrusted Data

Apache InLong is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to improper input validation during deserialization, which allows an attacker to exploit URL encoding and backspace characters to bypass security checks and perform a JDBC injection attack...

6.5CVSS7.1AI score0.00741EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2025/05/28 9:31 a.m.16 views

GHSA-532X-J9R7-8F73 Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncode and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...

6.5CVSS7AI score0.00741EPSS
SaveExploits0References6
OSV
OSV
added 2025/05/28 9:31 a.m.15 views

GHSA-98V7-XXXV-HCRH Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability allows attackers to bypass the security mechanisms of InLong JDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's...

8.7CVSS7.4AI score0.00636EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/05/28 9:31 a.m.16 views

Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability allows attackers to bypass the security mechanisms of InLong JDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's...

9.1CVSS7.1AI score0.00636EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2025/05/28 9:31 a.m.17 views

Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncode and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...

6.5CVSS6.8AI score0.00741EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2025/05/28 9:31 a.m.20 views

Apache InLong: JDBC Vulnerability during verification processing

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it. 1...

6.5CVSS6.6AI score0.00778EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/05/28 9:31 a.m.9 views

GHSA-R324-VGR5-73C9 Apache InLong: JDBC Vulnerability during verification processing

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it. 1...

9.3CVSS8.1AI score0.00778EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2025/05/28 8:15 a.m.6 views

CVE-2025-27522

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it. 1...

9.8CVSS5.9AI score0.0113EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2025/05/28 8:15 a.m.37 views

CVE-2025-27526

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...

6.5CVSS0.00741EPSS
SaveExploits0References3
NVD
NVD
added 2025/05/28 8:15 a.m.22 views

CVE-2025-27528

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability allows attackers to bypass the security mechanisms of InLong JDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's...

9.1CVSS0.00636EPSS
SaveExploits0References3
OSV
OSV
added 2025/05/28 8:15 a.m.22 views

CVE-2025-27526

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...

6.5CVSS5.8AI score0.00741EPSS
SaveExploits0References3
NVD
NVD
added 2025/05/28 8:15 a.m.43 views

CVE-2025-27522

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it. 1...

6.5CVSS0.00778EPSS
SaveExploits0References3
CVE
CVE
added 2025/05/28 8:12 a.m.79 views

CVE-2025-27528

CVE-2025-27528 describes a deserialization of untrusted data vulnerability in Apache InLong (versions 1.13.0–2.1.0) that can bypass InLong JDBC security and lead to arbitrary file reading. Public sources (Red Hat, NVD, and CVE records) consistently indicate the affected component as InLong JDBC a...

9.1CVSS7.2AI score0.00636EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/28 8:12 a.m.18 views

CVE-2025-27528 Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability allows attackers to bypass the security mechanisms of InLong JDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's...

7.2AI score0.00636EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/05/28 8:12 a.m.28 views

CVE-2025-27528 Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability allows attackers to bypass the security mechanisms of InLong JDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's...

0.00636EPSS
SaveExploits0References2
CVE
CVE
added 2025/05/28 8:07 a.m.81 views

CVE-2025-27526

CVE-2025-27526 affects Apache InLong versions 1.13.0 through 2.1.0 and is due to insecure deserialization of untrusted data, which can enable a JDBC URL-encoding/backspace bypass vulnerability. The issue’s remediation is to upgrade to InLong 2.2.0 or cherry-pick the confirmed fix from GitHub (PR ...

6.5CVSS6.9AI score0.00741EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2025/05/28 8:07 a.m.22 views

CVE-2025-27526 Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...

0.00741EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/05/28 8:07 a.m.14 views

CVE-2025-27526 Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...

6.9AI score0.00741EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/05/28 8:06 a.m.35 views

CVE-2025-27522 Apache InLong: JDBC Vulnerability during verification processing

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it. 1...

0.00778EPSS
SaveExploits0References2
Rows per page
Query Builder