org.apache.inlong:manager-client (>=1.3.0, <=1.13.0), org.apache.inlong:manager-client-examples (>=1.3.0, <=1.13.0) +2 more potentially affected by CVE-2023-31098 via org.apache.inlong:manager-pojo (>=1.3.0, <=1.13.0)

org.apache.inlong:manager-pojo MAVEN version =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.13.0 - org.apache.inlong:manager-schedule 1.13.0 Source cves: CVE-2023-31098 Source advisory: OSV:GHSA-W3WR-GMWF-R333...

CVE-2023-31098

CVE-2023-31098 concerns Apache InLong, affected in versions 1.1.0 through 1.6.0. The underlying issue is weak password requirements: the application does not enforce sufficient password complexity, enabling attackers to guess passwords and gain account access. The risk is described as a high impa...