PT-2024-14291

CVE-2023-51785

·

Published

2024-01-03

·

Updated

2024-09-06

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apache InLong versions 1.7.0 through 1.9.0
Description The issue is related to the deserialization of untrusted data in Apache InLong, allowing attackers to perform an arbitrary file read attack using the mysql driver.
Recommendations For Apache InLong versions 1.7.0 through 1.9.0, upgrade to Apache InLong's 1.10.0 or cherry-pick the fix from https://github.com/apache/inlong/pull/9331 to solve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-502: Deserialization of Untrusted Data
Related identifiers
CVE-2023-51785
GHSA-CRWJ-2R3C-GX2G
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com