Lucene search
K

7 matches found

CNVD
CNVD
added 2025/06/23 12:0 a.m.1 views

Apache InLong Deserialization Vulnerability (CNVD-2025-15707)

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. A deserialization vulnerability exists in Apache InLong versions prior to 1.13.0 to 2.1.0. The vulnerability stems from unsafe...

9.8CVSS7.1AI score0.00496EPSS
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/05 12:0 a.m.1 views

The vulnerability of the Apache InLong data integration platform, related to deficiencies in the deserialization mechanism, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache InLong data integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.5CVSS5.5AI score0.00396EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/30 8:56 a.m.10 views

CVE-2025-27526

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...

6.5CVSS6.8AI score0.00395EPSS
Exploits0References1
OSV
OSV
added 2025/05/28 8:15 a.m.3 views

CVE-2025-27528

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability allows attackers to bypass the security mechanisms of InLong JDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's...

9.1CVSS5.8AI score0.00358EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/05/28 12:0 a.m.0 views

Apache InLong 代码问题漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. Apache InLong versions 1.13.0 to 2.1.0 has a deserialization vulnerability , the vulnerability stems from the application in the...

6.5CVSS7AI score0.00395EPSS
Exploits0References4
OSV
OSV
added 2024/05/08 3:15 p.m.1 views

CVE-2024-26579

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.11.0, the attackers can bypass using malicious parameters. Users are advised to upgrade to Apache InLong's 1.12.0 or cherry-pick 1, 2 to solve it. 1...

9.8CVSS5.8AI score0.00541EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/10/19 12:0 a.m.1 views

Apache InLong 代码问题漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. Apache InLong has a deserialization vulnerability that originates from unsafe deserialization processing of serialized data receive...

7.5CVSS7.5AI score0.00043EPSS
Exploits0References2
Rows per page
Query Builder