Deserialization Of Untrusted Data

org.apache.inlong, manager-pojo is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to improper handling and validation of serialized data, allows attackers to inject malicious data that the system trusts and processes. Note: Specially due to secondary mining bypass for...

Apache InLong: JDBC Vulnerability during verification processing

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it. 1...

CVE-2025-27522

The Apache InLong data integration framework is vulnerable to a security bypass due to an insecure deserialization flaw in versions 1.13.0 through 2.1.0 . This vulnerability is a secondary mining bypass for CVE-2024-26579, where an attacker could exploit the deserialization mechanism to cause a b...

CVE-2025-27522 Apache InLong: JDBC Vulnerability during verification processing

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it. 1...

CVE-2024-26579

creationtimestamp| type| source ---|---|--- 2025-05-28 01:35:05+00:00| seen| https://seclists.org/oss-sec/2025/q2/171...

CVE-2024-26579

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.11.0, the attackers can bypass using malicious parameters. Users are advised to upgrade to Apache InLong's 1.12.0 or cherry-pick 1, 2 to solve it. 1...

CVE-2024-26579

CVE-2024-26579 is a Deserialization of Untrusted Data vulnerability in Apache InLong affecting 1.7.0–1.11.0. It can allow high-impact access to confidentiality, integrity, and availability (CVSS v3.1: 9.8). Remediation: upgrade to InLong 1.12.0 or cherry-pick PRs 9694 and 9707 as fix paths. Explo...

CVE-2024-26579 Apache Inlong JDBC Vulnerability

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.11.0, the attackers can bypass using malicious parameters. Users are advised to upgrade to Apache InLong's 1.12.0 or cherry-pick 1, 2 to solve it. 1...