Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.inlong:manager-service

10 known vulnerabilities (4 critical, 4 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
10 · 4 critical, 4 high, 1 medium
Registry
Maven Central

Advisories 10

  • CVE-2023-35088Critical 9.8

    Apache InLong: SQL injection in audit endpoint

    Affected: from 1.4.0, fixed in 1.8.0.

  • CVE-2023-31062Critical 9.8

    Apache InLong: Privilege escalation vulnerability for InLong

    Affected: from 1.2.0, fixed in 1.7.0.

  • CVE-2023-31065Critical 9.1

    Apache InLong: Insufficient Session Expiration in InLong

    Affected: from 1.4.0, fixed in 1.7.0.

  • CVE-2023-31066Critical 9.1

    Apache InLong: Insecure direct object references for inlong sources

    Affected: from 1.4.0, fixed in 1.7.0.

  • Apache InLong: Users who joined later can see the data of deleted users

    Affected: from 1.5.0, fixed in 1.7.0.

  • Apache InLong: Attackers can change the immutable name and type of cluster

    Affected: from 1.4.0, fixed in 1.7.0.

  • Apache InLong: Attackers can change the immutable name and type of nodes

    Affected: from 1.4.0, fixed in 1.7.0.

  • Apache InLong: IDOR make users can delete others' subscription

    Affected: from 1.2.0, fixed in 1.7.0.

  • Apache InLong: IDOR make users can bind any cluster

    Affected: from 1.2.0, fixed in 1.7.0.

  • CVE-2023-30465Medium 5.3

    Apache InLong: SQL injection in apache inLong 1.5.0

    Affected: from 1.4.0, fixed in 1.6.0.