Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1mNDc1LWpnZzMtM2p3Y84AA0cl

Apache InLong Exposure of Resource to Wrong Sphere vulnerability

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of nodes of InLong. Users are advised to upgrade to Apache InLong 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7891 to solve it.

Permalink: https://github.com/advisories/GHSA-f475-jgg3-3jwc
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mNDc1LWpnZzMtM2p3Y84AA0cl
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: 10 months ago
Updated: 6 months ago

CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Identifiers: GHSA-f475-jgg3-3jwc, CVE-2023-31206
References:

• https://nvd.nist.gov/vuln/detail/CVE-2023-31206
• https://lists.apache.org/thread/qb7zffo785wzpmsobjqcypodngw6kg6x
• https://github.com/apache/inlong/pull/7891
• https://github.com/advisories/GHSA-f475-jgg3-3jwc

Repository: https://github.com/apache/inlong
Blast Radius: 11.6

Affected Packages