CVE-2023-31066: Apache InLong: Insecure direct object references for inlong sources
Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Different users in InLong could delete, edit, stop, and start others' sources! Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7775 https://github.com/apache/inlong/pull/7775 to solve it.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Apache InLong vulnerability?
The vulnerability ID of this Apache InLong vulnerability is CVE-2023-31066.
What is the title of this Apache InLong vulnerability?
The title of this Apache InLong vulnerability is 'Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong'.
What is the severity of CVE-2023-31066?
The severity of CVE-2023-31066 is critical with a CVSS score of 9.1.
Which version of Apache InLong is affected by this vulnerability?
The vulnerability affects Apache InLong versions 1.4.0 through 1.6.0.
How can I fix the Files or Directories Accessible to External Parties vulnerability in Apache InLong?
To fix the vulnerability, users are advised to upgrade to Apache InLong version 1.7 or later.