PT-2026-79052 · Apache · Apache Inlong
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Apache InLong versions 2.0.0 through 2.3.x
Description
An authenticated user, regardless of whether they possess an administrative role, can trigger the InLong Manager server to initiate outbound HTTP requests or TCP connections to arbitrary internal hosts and ports. This is a Server-Side Request Forgery (SSRF), which occurs when an attacker induces a server-side application to make requests to an unintended location.
Recommendations
Upgrade to version 2.4.0.
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Inlong