PT-2024-21429
CVE-2024-26579
·
تاريخ النشر
2024-05-08
·
تاريخ التحديث
2026-03-16
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Apache InLong versions 1.7.0 through 1.11.0
Description
The issue is related to the deserialization of untrusted data, allowing attackers to bypass security using malicious parameters.
Recommendations
For Apache InLong versions 1.7.0 through 1.11.0, users are advised to upgrade to Apache InLong's 1.12.0 or cherry-pick the specified patches to solve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾