GitHub Advisoryadvisory · Maven

GHSA-3p9p-59qf-mqwh Apache InLong has Files or Directories Accessible to External Parties

HIGH Published 2023-07-06 Modified 2023-07-06 Official page ↗
Aliases
CVE-2023-31064
Ecosystem
Maven
Packages
org.apache.inlong:manager-workflow
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-552
Reviewed
2023-07-06

Affected packages

• Maven org.apache.inlong:manager-workflow: >= 1.2.0, < 1.7.0 → fixed in 1.7.0

Description

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong from 1.2.0 through 1.6.0.The user in InLong could cancel an application that doesn't belong to it. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7799 to solve it.

Related

Alias · CVE (1)

  • CVE-2023-31064 Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache… vulnerability

Weakness · CWE (1)

  • CWE-552 Files or Directories Accessible to External Parties weakness

References