Skip to content
fr Sign in
Not rated

CVE-2023-27296 Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong

Description

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong. It could be triggered by authenticated users of InLong, you could refer to [1] to know more about this vulnerability. This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick [2] to solve it. [1]  https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html [2] https://github.com/apache/inlong/pull/7422 https://github.com/apache/inlong/pull/7422

Affected products and versions

Product Affected versions Fixed in
Apache InLong 1.1 1.1.0 → 1.5.0 No fix stated
inlong 1.1 1.1.0 → 1.5.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Apache InLong

The 41 CVEs of Apache InLong →
CVE-2026-63046 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache InLong. Agent… Not rated CVE-2026-63044 Server-Side Request Forgery (SSRF) vulnerability in Apache InLong.  Any authenticated user (no admin role required)… Not rated CVE-2026-63043 Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host filesystem Not rated CVE-2026-63042 Files or Directories Accessible to External Parties vulnerability in Apache InLong Not rated
Track this CVE