Security Advisory

CVE-2023-27296

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-03-27 14:10:32

Last updated 2024-10-23 16:39:30

Assigner apache

CVSS score not scored

State PUBLISHED

Description

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong. It could be triggered by authenticated users of InLong, you could refer to [1] to know more about this vulnerability. This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick [2] to solve it. [1] https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html [2] https://github.com/apache/inlong/pull/7422 https://github.com/apache/inlong/pull/7422

← Browse all CVEs View on cve.org ↗