Lucene search

K
ApacheInlong1.2.0

4 matches found

CVE
CVE
added 2023/05/22 4:15 p.m.46 views

CVE-2023-31064

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. the user in InLong could cancel an application that doesn't belongs to it. Users are advised to upgrade to Apache InLong's 1.7.0 ...

7.5CVSS7.4AI score0.00189EPSS
CVE
CVE
added 2023/05/22 2:15 p.m.46 views

CVE-2023-31453

Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. The attacker can delete others' subscriptions, even if they are not the ownerof the deleted subscription. Users are advised to ...

7.5CVSS7.5AI score0.00184EPSS
CVE
CVE
added 2023/05/22 2:15 p.m.44 views

CVE-2023-31454

Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. The attacker can bind any cluster, even if he is not the cluster owner. Users are advised to upgrade to Apache InLong's 1.7.0 o...

7.5CVSS7.5AI score0.00141EPSS
CVE
CVE
added 2023/05/22 4:15 p.m.39 views

CVE-2023-31062

Improper Privilege Management Vulnerabilities in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. When the attacker has access to a valid (but unprivileged) account, the exploit can be executed using Burp Suite by sending a loginrequest and follow...

9.8CVSS9.6AI score0.00169EPSS