PT-2023-2169

CVE-2023-24997

تاريخ النشر

2023-02-01

تاريخ التحديث

2025-03-26

الوصف من

CVSS 3.1

حرجة

المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache InLong versions 1.1.0 through 1.5.0

Description The issue is related to the deserialization of untrusted data, which can allow a remote attacker to impact the confidentiality, integrity, and availability of the system. Users are advised to take action to resolve the issue.

Recommendations For Apache InLong versions 1.1.0 through 1.5.0, upgrade to the latest version of Apache InLong or cherry-pick https://github.com/apache/inlong/pull/7223 to solve the issue.

قابلية الاستغلال

إصلاح

التأثيرات

الباحثون

S3Gundo

S3Gundo Of

المورّدون

المنتجات المتأثرة

تصنيف نقاط الضعف

CWE-502: Deserialization of Untrusted Data

المعرّفات ذات الصلة

CVE-2023-24997