Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS1mZ2gzLXB3bXAtM3F3M84AA73r

Apache Inlong Deserialization of Untrusted Data vulnerability

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.7.0 through 1.11.0. The attackers can bypass using malicious parameters.

Users are advised to upgrade to Apache InLong's 1.12.0 or cherry-pick [1], [2] to solve it.

[1] https://github.com/apache/inlong/pull/9694

[2] https://github.com/apache/inlong/pull/9707

Permalink: https://github.com/advisories/GHSA-fgh3-pwmp-3qw3
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mZ2gzLXB3bXAtM3F3M84AA73r
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: 7 months ago
Updated: 7 months ago

Identifiers: GHSA-fgh3-pwmp-3qw3, CVE-2024-26579
References:

Repository: https://github.com/apache/inlong
Blast Radius: 0.0

Affected Packages

maven:org.apache.inlong:manager-pojo

Dependent packages: 3
Dependent repositories: 30
Downloads:
Affected Version Ranges: >= 1.7.0, < 1.12.0
Fixed in: 1.12.0
All affected versions: 1.7.0, 1.8.0, 1.9.0, 1.10.0, 1.11.0
All unaffected versions: 1.3.0, 1.4.0, 1.5.0, 1.6.0, 1.12.0, 1.13.0, 2.0.0