We found results for “”
CVE-2023-51784
Good to know:
Date: January 3, 2024
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/9329
Language: Java
Severity Score
Severity Score
Weakness Type (CWE)
Code Injection
CWE-94Top Fix
Upgrade Version
Upgrade to version org.apache.inlong:manager-pojo:1.10.0, org.apache.inlong:manager-web:1.10.0
CVSS v3.1
Base Score: |
|
---|---|
Attack Vector (AV): | NETWORK |
Attack Complexity (AC): | LOW |
Privileges Required (PR): | NONE |
User Interaction (UI): | NONE |
Scope (S): | UNCHANGED |
Confidentiality (C): | HIGH |
Integrity (I): | HIGH |
Availability (A): | HIGH |