Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
ApacheInlong

13 matches found

cve
cve•added 2024/05/08 3:15 p.m.•78 views

CVE-2024-26579

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.11.0, the attackers can bypass using malicious parameters. Users are advised to upgrade to Apache InLong's 1.12.0 or cherry-pick [1], [2] to solve it. [1] https://github.com/apach...

9.8CVSS9.5AI score0.00237EPSS
cve
cve•added 2024/03/06 12:15 p.m.•77 views

CVE-2024-26580

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.8.0 through 1.10.0, the attackers can use the specific payload to read from an arbitrary file. Users are advised to upgrade to Apache InLong's 1.11.0 or cherry-pick [1] to solve it. [1] https:/...

9.1CVSS9.1AI score0.00168EPSS
cve
cve•added 2023/02/01 3:15 p.m.•63 views

CVE-2023-24997

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7223 https://github.com/apache/...

9.8CVSS9.5AI score0.00202EPSS
cve
cve•added 2023/05/22 4:15 p.m.•57 views

CVE-2023-31098

Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.6.0. When users change their password to a simple password (with any character orsymbol), attackers can easily guess the user's password and access the account...

9.8CVSS9.5AI score0.00169EPSS
cve
cve•added 2023/07/25 8:15 a.m.•56 views

CVE-2023-35088

Improper Neutralization of Special Elements Used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. In the toAuditCkSql method, the groupId, streamId, auditId, and dt are directly concatenated int...

9.8CVSS10AI score0.00513EPSS
cve
cve•added 2024/01/03 10:15 a.m.•55 views

CVE-2023-51784

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it. [1] https://github.c...

9.8CVSS9.7AI score0.07083EPSS
cve
cve•added 2025/05/28 8:15 a.m.•45 views

CVE-2025-27528

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. Thisvulnerability allows attackers to bypass the security mechanisms of InLongJDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's 2.2....

9.1CVSS7.2AI score0.00087EPSS
cve
cve•added 2025/06/06 3:15 p.m.•45 views

CVE-2025-27531

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 before 2.1.0, this issue would allow an authenticated attacker to read arbitrary files by double writing the param. Users are recommended to upgrade to version 2.1.0, which fixes the issu...

9.8CVSS6.5AI score0.00188EPSS
cve
cve•added 2023/05/22 4:15 p.m.•44 views

CVE-2023-31066

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Different users in InLong could delete, edit, stop, and start others' sources! Users are advised to upgrade to Apache InLong's 1....

9.1CVSS9.2AI score0.00233EPSS
cve
cve•added 2023/05/22 4:15 p.m.•38 views

CVE-2023-31062

Improper Privilege Management Vulnerabilities in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. When the attacker has access to a valid (but unprivileged) account, the exploit can be executed using Burp Suite by sending a loginrequest and follow...

9.8CVSS9.6AI score0.00169EPSS
cve
cve•added 2023/05/22 4:15 p.m.•35 views

CVE-2023-31065

Insufficient Session Expiration vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. An old session can be used by an attacker even after the user has been deleted or the password has been changed. Users are advised to upgrade to Apac...

9.1CVSS9.3AI score0.00171EPSS
cve
cve•added 2023/10/16 9:15 a.m.•35 views

CVE-2023-43668

Authorization Bypass Through User-Controlled Key vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0, some sensitive params checks will be bypassed, like "autoDeserizalize","allowLoadLocalInfile".... . Users are advised to upgrade to Apache InLong's 1.9.0 or ch...

9.8CVSS9.4AI score0.00035EPSS
cve
cve•added 2024/08/02 10:16 a.m.•21 views

CVE-2024-36268

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong. This issue affects Apache InLong: from 1.10.0 through 1.12.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.13.0 or cherry-pick [1] to solve it. [1] https://githu...

9.8CVSS7AI score0.02191EPSS