Security Advisory

CVE-2026-63044

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-20 15:57:02

Last updated 2026-08-21 18:57:30

Assigner apache

CVSS score 5.4

State PUBLISHED

Description

Server-Side Request Forgery (SSRF) vulnerability in Apache InLong. Any authenticated user (no admin role required) can cause the InLong Manager server to make outbound HTTP requests or TCP connections to arbitrary internal hosts and ports. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/12130 .

← Browse all CVEs View on cve.org ↗