CVE-2023-51784: Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it.
[1] https://github.com/apache/inlong/pull/9329
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51784?
CVE-2023-51784 is a high severity vulnerability that can lead to remote code execution in affected versions of Apache InLong.
How do I fix CVE-2023-51784?
To fix CVE-2023-51784, users should upgrade Apache InLong to version 1.10.0 or later.
Which versions of Apache InLong are affected by CVE-2023-51784?
CVE-2023-51784 affects Apache InLong versions from 1.5.0 up to 1.9.0.
What type of vulnerability is CVE-2023-51784?
CVE-2023-51784 is identified as a Code Injection vulnerability.
Is there a workaround for CVE-2023-51784?
There are no known workarounds for CVE-2023-51784; upgrading is the recommended solution.