Deserialization Of Untrusted Data

2024-03-0707:45:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

deserialization

untrusted data

apache inlong manager

AI Score

6.7

Confidence

High

EPSS

Percentile

9.0%

JSON

org.apache.inlong/inlong-manager is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to improper handling of user-supplied input in AuditServiceImpl.java. The attacker can read arbitrary files by exploiting this vulnerability.