CVE-2023-51785: Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager
Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it.
[1] https://github.com/apache/inlong/pull/9331
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51785?
CVE-2023-51785 is classified as a high severity vulnerability due to its potential to allow arbitrary file read attacks.
How do I fix CVE-2023-51785?
To fix CVE-2023-51785, upgrade your Apache InLong to version 1.10.0 or later.
Which versions of Apache InLong are affected by CVE-2023-51785?
CVE-2023-51785 affects Apache InLong versions from 1.7.0 to 1.9.0.
What type of attack is possible with CVE-2023-51785?
CVE-2023-51785 allows attackers to perform arbitrary file read attacks using the MySQL driver.
Is there a workaround for CVE-2023-51785?
A workaround for CVE-2023-51785 includes cherry-picking certain fixes if an immediate upgrade is not feasible.