Lucene search

K

4 matches found

CVE
CVE
added 2025/05/28 8:15 a.m.47 views

CVE-2025-27526

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it...

6.5CVSS6.9AI score0.00095EPSS
CVE
CVE
added 2025/05/28 8:15 a.m.45 views

CVE-2025-27528

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. Thisvulnerability allows attackers to bypass the security mechanisms of InLongJDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's 2.2....

9.1CVSS7.2AI score0.00087EPSS
CVE
CVE
added 2025/06/06 3:15 p.m.45 views

CVE-2025-27531

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 before 2.1.0, this issue would allow an authenticated attacker to read arbitrary files by double writing the param. Users are recommended to upgrade to version 2.1.0, which fixes the issu...

9.8CVSS6.5AI score0.00188EPSS
CVE
CVE
added 2025/05/28 8:15 a.m.42 views

CVE-2025-27522

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it. [1] https://github...

6.5CVSS6.8AI score0.00237EPSS