CVE-2023-31206
HIGH7.5EPSS 0.85%Apache InLong Exposure of Resource to Wrong Sphere vulnerability
Published: 7/6/2023Modified: 2/16/2024
Description
Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of nodes of InLong. Users are advised to upgrade to Apache InLong 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7891 to solve it.
Affected packages (5)
- Maven/org.apache.inlong:manager-dao>= 1.4.0, < 1.7.0
- Maven/org.apache.inlong:manager-pojo>= 1.4.0, < 1.7.0
- Maven/org.apache.inlong:manager-service>= 1.4.0, < 1.7.0
- Maven/org.apache.inlong:manager-test>= 1.4.0, < 1.7.0
- Maven/org.apache.inlong:manager-web>= 1.4.0, < 1.7.0
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |