Zhaokaifei

**Name of the Vulnerable Software and Affected Versions** Apache Hive versions prior to 4.2.1 **Description** An authenticated remote attacker with CREATE TABLE privileges can execute a Server-Side Request Forgery (SSRF) during Avro SerDe schema resolution. By setting the `avro.schema.url` table property on an Avro table, the attacker can force the Hive server to fetch a URL under their control when the table is queried. This can lead to the exposure of local server files, internal network services, or cloud instance metadata to the Hive process identity. The attack requires network access to HiveServer2 or the Metastore and valid authentication. **Recommendations** Upgrade to version 4.2.1.

**Name of the Vulnerable Software and Affected Versions** Apache InLong versions 2.0.0 through 2.3.x **Description** An SQL injection issue exists where improper neutralization of special elements in an SQL command allows an attacker to inject arbitrary SQL code. This is achieved through string concatenation using the `dbName`, `tableName`, `schemaName`, and `username` parameters. **Recommendations** Upgrade to version 2.4.0.

**Name of the Vulnerable Software and Affected Versions** Apache Shiro versions prior to 2.2.1 Apache Shiro versions prior to 3.0.0-alpha-2 **Description** A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction within the `DefaultLdapRealm` class. User-supplied username input is directly concatenated into the LDAP DN template without escaping RFC 2253 special characters. This allows an attacker to manipulate the DN structure used for LDAP bind authentication, potentially leading to authentication bypass or user impersonation. **Recommendations** Upgrade to version 2.2.1 or later. Upgrade to version 3.0.0-alpha-2 or later.

**Name of the Vulnerable Software and Affected Versions** Apache OFBiz versions prior to 24.09.06 **Description** Improper Neutralization of Special Elements used in an LDAP Query, also known as LDAP Injection, allows for authentication bypass due to improper neutralization of LDAP special elements in DN construction. LDAP Injection occurs when an application fails to properly sanitize user-supplied input before using it in a Lightweight Directory Access Protocol (LDAP) query, potentially allowing an attacker to manipulate the query logic. **Recommendations** Upgrade to version 24.09.06.