What is the vulnerability ID?

The vulnerability ID is CVE-2023-46227.

What is the severity of CVE-2023-46227?

The severity of CVE-2023-46227 is not mentioned in the provided information.

How does CVE-2023-46227 affect Apache InLong?

CVE-2023-46227 affects Apache InLong versions 1.4.0 through 1.8.0.

How can I fix CVE-2023-46227?

To fix CVE-2023-46227, it is advised to upgrade to Apache InLong version 1.9.0 or apply the cherry-picked solution.

Where can I find more information about CVE-2023-46227?

You can find more information about CVE-2023-46227 on the NIST National Vulnerability Database (NVD) website.

Vulnerability/
CVE-2023-46227

high

7.5

CWE

502

19/10/2023

21/11/2024

CVE-2023-46227: Apache inlong has an Arbitrary File Read Vulnerability

First published: Thu Oct 19 2023(Updated: )

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can use \t to bypass. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/8814

Credit: security@apache.org security@apache.org security@apache.org

Affected Software	Affected Version	How to fix
Apache InLong	>=1.4.0<1.9.0
maven/org.apache.inlong:manager-pojo	>=1.4.0<1.9.0	1.9.0
maven/org.apache.inlong:manager-common	>=1.4.0<1.9.0	1.9.0
	>=1.4.0<1.9.0

Never miss a vulnerability like this again

Reference Links

https://lists.apache.org/thread/m8txor4f76tmrxksrmc87tw42g57nz33

Frequently Asked Questions

What is the vulnerability ID?
The vulnerability ID is CVE-2023-46227.
What is the severity of CVE-2023-46227?
The severity of CVE-2023-46227 is not mentioned in the provided information.
How does CVE-2023-46227 affect Apache InLong?
CVE-2023-46227 affects Apache InLong versions 1.4.0 through 1.8.0.
How can I fix CVE-2023-46227?
To fix CVE-2023-46227, it is advised to upgrade to Apache InLong version 1.9.0 or apply the cherry-picked solution.
Where can I find more information about CVE-2023-46227?
You can find more information about CVE-2023-46227 on the NIST National Vulnerability Database (NVD) website.

collector/oss-sec
alias/CVE-2023-46227
collector/nvd-index
collector/nvd-cve
collector/github-advisory-latest
alias/GHSA-jj32-3pf5-5mv5
collector/github-advisory
agent/type
agent/first-publish-date
agent/references
agent/weakness
agent/title
agent/severity
agent/author
agent/description
collector/mitre-cve
source/MITRE
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/last-modified-date
agent/softwarecombine
agent/tags
agent/event
agent/trending
vendor/apache
canonical/apache inlong
version/apache inlong/1.4.0
package-manager/maven

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.