CVE-2023-46227

    Dashboard / Vulnerabilities / CVE-2023-46227

    CVE-2023-46227

    Published: 19 Oct 2023Last Modified: 8 Nov 2023

    Summary:

    Details: Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can use \t to bypass. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/8814

    References: https://lists.apache.org/thread/m8txor4f76tmrxksrmc87tw42g57nz33

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 8c8145974548568a68bb81720cabdafbefe545be
    Fixed -7a32e287dd42609af649f2390a3c5a46b059f34a

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-46227 | CVE-DB