https://seclists.org/oss-sec/2023/q3/66: CVE-2023-35088: Apache InLong: SQL injection in audit endpoint
Published Jul 25, 2023
·Updated
Affected Software
1 affected component
Apache Inlong>=1.4.0<=1.7.0
Frequently Asked Questions
1
What is the severity of CVE-2023-35088?
The severity of CVE-2023-35088 is classified as moderate.
2
Which versions of Apache InLong are affected by CVE-2023-35088?
CVE-2023-35088 affects Apache InLong versions from 1.4.0 through 1.7.0.
3
What type of vulnerability is represented by CVE-2023-35088?
CVE-2023-35088 is an SQL injection vulnerability in the audit endpoint of Apache InLong.
4
How do I fix CVE-2023-35088?
To fix CVE-2023-35088, upgrade Apache InLong to a version higher than 1.7.0.
5
What impact does CVE-2023-35088 have on Apache InLong users?
CVE-2023-35088 may allow attackers to execute arbitrary SQL commands, potentially compromising the data.