CVE-2023-24977
Assigner: apache
Published: 2023-02-01T09:09:55.963Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache InLong
vendor: Apache Software Foundation
versions: lessThanOrEqual: 1.5.0
status: affected
version: 1.1.0
versionType: semver
credits: type: finder
value: This issue was discovered by s3gundo of Hundsun Tech
descriptions: supportingMedia: base64: no
type: text/html
value: Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.<p>This issue affects Apache InLong: from 1.1.0 through 1.5.0.&nbsp;Users are advised to upgrade to Apache InLong's latest version or cherry-pick <a target="_blank" rel="nofollow" href="https://github.com/apache/inlong/pull/7214">https://github.com/apache/inlong/pull/7214</a>&nbsp;to solve it.</p>
value: Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick  https://github.com/apache/inlong/pull/7214 https://github.com/apache/inlong/pull/7214  to solve it.


metrics: other: content: text: important
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-125
description: CWE-125 Out-of-bounds Read
type: CWE
source: discovery: UNKNOWN
title: Apache InLong: Jdbc Connection causes arbitrary file reading in InLong
x_generator: engine: Vulnogram 0.1.0-dev