Geo

**Name of the Vulnerable Software and Affected Versions** Apache InLong versions 2.0.0 through 2.3.x **Description** An authenticated user, regardless of whether they possess an administrative role, can trigger the InLong Manager server to initiate outbound HTTP requests or TCP connections to arbitrary internal hosts and ports. This is a Server-Side Request Forgery (SSRF), which occurs when an attacker induces a server-side application to make requests to an unintended location. **Recommendations** Upgrade to version 2.4.0.