CVE-2023-51785

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1...

CVE-2023-51785

creationtimestamp| type| source ---|---|--- 2024-01-03 11:26:11+00:00| seen| https://t.me/ctinow/162313 2024-01-04 01:35:24+00:00| published-proof-of-concept| https://t.me/cibsecurity/74314 2024-01-05 13:45:20+00:00| published-proof-of-concept| https://t.me/arpsyndicate/2477 2024-01-23...

CVE-2023-51785

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

CVE-2023-51785 Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

CVE-2023-51785

Summary: CVE-2023-51785 affects Apache InLong (Manager) versions 1.7.0–1.9.0. The issue is a deserialization of untrusted data flaw that enables an arbitrary file read via the MySQL driver. Root cause and impact are described as a deserialization vulnerability enabling file reads; no exploitation...