GitHub Advisoryadvisory · Maven

GHSA-f475-jgg3-3jwc Apache InLong Exposure of Resource to Wrong Sphere vulnerability

HIGH Published 2023-07-06 Modified 2023-07-06 Official page ↗
Aliases
CVE-2023-31206
Ecosystem
Maven
Packages
org.apache.inlong:manager-pojo, org.apache.inlong:manager-dao, org.apache.inlong:manager-service, org.apache.inlong:manager-test, org.apache.inlong:manager-web
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-668
Reviewed
2023-07-06

Affected packages

• Maven org.apache.inlong:manager-pojo: >= 1.4.0, < 1.7.0 → fixed in 1.7.0 • Maven org.apache.inlong:manager-dao: >= 1.4.0, < 1.7.0 → fixed in 1.7.0 • Maven org.apache.inlong:manager-service: >= 1.4.0, < 1.7.0 → fixed in 1.7.0 • Maven org.apache.inlong:manager-test: >= 1.4.0, < 1.7.0 → fixed in 1.7.0 • Maven org.apache.inlong:manager-web: >= 1.4.0, < 1.7.0 → fixed in 1.7.0

Description

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of nodes of InLong. Users are advised to upgrade to Apache InLong 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7891 to solve it.

Related

Alias · CVE (1)

  • CVE-2023-31206 Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0… vulnerability

Weakness · CWE (1)

  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References