CVE-2023-31101CWE-1188

Apache InLong: Users who joined later can see the data of deleted users

published May 22, 2023

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.6.0. Users registered in InLong who joined later can see deleted users' data. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7836 https://github.com/apache/inlong/pull/7836 to solve it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01110 · 65.6th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2023-05-22T15:17Z
EPSS history
Timeline
  • 22 MAY 15:17Z
    Apache InLong: Users who joined later can see the data of deleted users
    cvelistv5