CVE-2023-51785CWE-502

Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager

High · published January 3, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
62.9
In the wild
Unconfirmed
What it is

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it.

[1]  https://github.com/apache/inlong/pull/9331

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01012 · 62.9th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2024-01-03T09:36Z
EPSS history
Timeline
  • 03 JAN 09:36Z
    Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager
    cvelistv5