Aller au contenu
en Se connecter
Non notée

CVE-2023-31062 Improper Privilege Management Vulnerabilities in Apache Software Foundation Apache InLong.This issue affects Apache…

Description

Improper Privilege Management Vulnerabilities in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0.  When the attacker has access to a valid (but unprivileged) account, the exploit can be executed using Burp Suite by sending a login request and following it with a subsequent HTTP request using the returned cookie. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7836 https://github.com/apache/inlong/pull/7836 to solve it.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache InLong 1.2 1.2.0 → 1.6.0 Pas de correctif indiqué
inlong 1.2 1.2.0 → 1.6.0 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Apache InLong

Les 41 CVE de Apache InLong →
CVE-2026-63046 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache InLong. Agent… Non notée CVE-2026-63044 Server-Side Request Forgery (SSRF) vulnerability in Apache InLong.  Any authenticated user (no admin role required)… Non notée CVE-2026-63043 Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host filesystem Non notée CVE-2026-63042 Files or Directories Accessible to External Parties vulnerability in Apache InLong Non notée
Suivre cette CVE