CVE-2023-46227: Apache inlong has an Arbitrary File Read Vulnerability
Published Oct 19, 2023
·Updated
Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.
This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can use \t to bypass. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it.
[1] https://github.com/apache/inlong/pull/8814
Affected Software
3 affected componentsFixes available
Apache Inlong>=1.4.0<1.9.0
maven/org.apache.inlong:manager-pojo>=1.4.0<1.9.0
1.9.0
maven/org.apache.inlong:manager-common>=1.4.0<1.9.0
1.9.0
Event History
Oct 19, 2023
CVE Published
via MITRE·09:40 AM
Data Sourced
via MITRE·09:40 AM
DescriptionWeakness
Data Sourced
10:15 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Advisory Published
12:30 PM
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-46227.
2
What is the severity of CVE-2023-46227?
The severity of CVE-2023-46227 is not mentioned in the provided information.
3
How does CVE-2023-46227 affect Apache InLong?
CVE-2023-46227 affects Apache InLong versions 1.4.0 through 1.8.0.
4
How can I fix CVE-2023-46227?
To fix CVE-2023-46227, it is advised to upgrade to Apache InLong version 1.9.0 or apply the cherry-picked solution.
5
Where can I find more information about CVE-2023-46227?
You can find more information about CVE-2023-46227 on the NIST National Vulnerability Database (NVD) website.