Beveiligingsadvies

CVE-2024-26580

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-03-06 12:07:28
Laatst bijgewerkt 2025-02-13 17:41:17
Toegewezen door apache
CVSS-score 9.1
Status PUBLISHED

Beschrijving

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.8.0 through 1.10.0, the attackers can use the specific payload to read from an arbitrary file. Users are advised to upgrade to Apache InLong's 1.11.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/9673