org.apache.inlong:manager-pojo is vulnerable to Deserialization Of Untrusted Data. The vulnerability exists in multiple functions because an attacker is able to add whitespaces when saving a url, which allows bypassing the autoDeserialize
option filtering, resulting in deserialization of potentially malicious data.
CPE | Name | Operator | Version |
---|---|---|---|
apache inlong - manager pojo | le | 1.6.0 | |
apache inlong - manager pojo | le | 1.6.0 |