Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.inlong:manager-web

7 known vulnerabilities (3 critical, 3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 3 critical, 3 high
Registry
Maven Central

Advisories 7

  • CVE-2023-31062Critical 9.8

    Apache InLong: Privilege escalation vulnerability for InLong

    Affected: from 1.2.0, fixed in 1.7.0.

  • CVE-2023-31065Critical 9.1

    Apache InLong: Insufficient Session Expiration in InLong

    Affected: from 1.4.0, fixed in 1.7.0.

  • CVE-2023-31066Critical 9.1

    Apache InLong: Insecure direct object references for inlong sources

    Affected: from 1.4.0, fixed in 1.7.0.

  • Apache InLong: Users who joined later can see the data of deleted users

    Affected: from 1.5.0, fixed in 1.7.0.

  • Apache InLong: Attackers can change the immutable name and type of cluster

    Affected: from 1.4.0, fixed in 1.7.0.

  • Apache InLong: Attackers can change the immutable name and type of nodes

    Affected: from 1.4.0, fixed in 1.7.0.

  • Apache InLong: IDOR make users can delete others' subscription

    Affected: from 1.2.0, fixed in 1.7.0.