CVE-2023-31062: Apache InLong: Privilege escalation vulnerability for InLong
Improper Privilege Management Vulnerabilities in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. When the attacker has access to a valid (but unprivileged) account, the exploit can be executed using Burp Suite by sending a login request and following it with a subsequent HTTP request using the returned cookie.
Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7836 https://github.com/apache/inlong/pull/7836 to solve it.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-31062?
CVE-2023-31062 is an improper privilege management vulnerability in Apache Software Foundation Apache InLong.
How does CVE-2023-31062 affect Apache InLong?
CVE-2023-31062 affects Apache InLong versions 1.2.0 through 1.6.0.
What is the severity of CVE-2023-31062?
CVE-2023-31062 has a severity rating of critical.
How can an attacker exploit CVE-2023-31062?
An attacker with access to a valid (but unprivileged) account can exploit CVE-2023-31062 using Burp Suite by sending a login request and following certain steps.
Is there a fix available for CVE-2023-31062?
Yes, a fix for CVE-2023-31062 is available. Please refer to the official Apache Software Foundation advisory for more information.