Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-31064

Apache InLong: Insecurity direct object references cancelling applications

Description

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. the user in InLong could cancel an application that doesn't belongs to it. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7799 https://github.com/apache/inlong/pull/7799 to solve it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache InLong

Default version status: unaffected

  • 1.2.0 to ≤ 1.6.0affected

References