CVE-2023-24977 Apache InLong: Jdbc Connection causes arbitrary file reading in InLong

Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214...

CVE-2023-24977

Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214...

CVE-2023-24977

CVE-2023-24977 is an Out-of-bounds Read vulnerability affecting Apache InLong versions 1.1.0 through 1.5.0. The Red Hat and CVE records describe it as an information-disclosure risk via an out-of-bounds read, with a remediation path to upgrade to the latest InLong release or to cherry-pick the pa...

CVE-2023-24977 Apache InLong: Jdbc Connection causes arbitrary file reading in InLong

Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214...

PT-2023-19850 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.1.0 through 1.5.0 Description: The issue is an Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong. Users are advised to upgrade to Apache InLong's latest version or cherry-pick a specific pat...

PT-2023-2169

Name of the Vulnerable Software and Affected Versions Apache InLong versions 1.1.0 through 1.5.0 Description The issue is related to the deserialization of untrusted data, which can allow a remote attacker to impact the confidentiality, integrity, and availability of the system. Users are advised...

CVE-2023-24997: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7223...

CVE-2023-24977: Out-of-bounds Read

Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214...

Apache InLong code issue vulnerabilities

Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. Apache InLong suffers from a deserialization vulnerability that can be exploited by a remote attacker to submit a special request and execute arbitrary code in the application context...

Apache InLong Deserialization Vulnerability

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. A deserialization vulnerability exists in Apache InLong versions prior to 1.3.0, which arises from unsafe deserialization of...

Remote Code Execution

org.apache.inlong:sort-connector-jdbc is vulnerable to remote code execution. A remote attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL database is able to upload and execute malicious code on server by misusing data...

org.apache.inlong:dataproxy-dist (0.11.0-incubating), org.apache.inlong:dataproxy-docker (0.11.0-incubating) +10 more potentially affected by CVE-2022-40955 via org.apache.inlong:inlong-common (0.11.0-incubating)

org.apache.inlong:inlong-common MAVEN version 0.11.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.inlong:inlong-common and may be impacted: - org.apache.inlong:dataproxy-dist 0.11.0-incubating - org.apache.inlong:dataproxy-dock...

Apache InLong vulnerable to Deserialization of Untrusted Data

In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL database, could cause this data to be deserialized by Apache InLong, potentially leading to Remote Code Execution on the...

GHSA-26M4-QJP9-XMC6 Apache InLong vulnerable to Deserialization of Untrusted Data

In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL database, could cause this data to be deserialized by Apache InLong, potentially leading to Remote Code Execution on the...

CVE-2022-40955

In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL database, could cause this data to be deserialized by Apache InLong, potentially leading to Remote Code Execution on the...

Remote code execution

In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL database, could cause this data to be deserialized by Apache InLong, potentially leading to Remote Code Execution on the...

CVE-2022-40955 Deserialization attack in Apache InLong prior to version 1.3.0 allows RCE via JDBC

In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL database, could cause this data to be deserialized by Apache InLong, potentially leading to Remote Code Execution on the...

org.apache.inlong:agent-common (>=0.12.0-incubating, <=1.2.0-incubating), org.apache.inlong:agent-core (>=0.12.0-incubating, <=1.2.0-incubating) +51 more potentially affected by CVE-2022-40955 via org.apache.inlong:inlong-common (>=0.9.0-incubating, <=1.2.0-incubating)

org.apache.inlong:inlong-common MAVEN version =0.9.0-incubating, =0.12.0-incubating, =0.12.0-incubating, =0.12.0-incubating, =0.12.0-incubating, =0.12.0-incubating, =0.12.0-incubating, =1.0.0-incubating, =0.12.0-incubating, =0.10.0-incubating, =0.10.0-incubating, =1.1.0-incubating,...

CVE-2022-40955

In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL database, could cause this data to be deserialized by Apache InLong, potentially leading to Remote Code Execution on the...

CVE-2022-40955 Deserialization attack in Apache InLong prior to version 1.3.0 allows RCE via JDBC

In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL database, could cause this data to be deserialized by Apache InLong, potentially leading to Remote Code Execution on the...