critical9.1
CVE-2023-31066
Apache InLong has Files or Directories Accessible to External Parties in Apache InLong
Impact
Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong: from 1.4.0 through 1.6.0. Different users in InLong could delete, edit, stop, and start others' sources. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7775 to solve it.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.apache.inlong:manager-service | >= 1.4.0, < 1.7.0 | 1.7.0 |
| maven | org.apache.inlong:manager-web | >= 1.4.0, < 1.7.0 | 1.7.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Inlong | from 1.4.0 through 1.6.0 |