GHSA-wj6q-chpv-mcrx

Опубликовано: 16 окт. 2023

Источник: github

Github: Прошло ревью

CVSS3: 6.5

Описание

Insufficient Verification of Data Authenticity in Apache InLong

Insufficient Verification of Data Authenticity vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0,

General user can view all user data like Admin account.

Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it.

[1] https://github.com/apache/inlong/pull/8623

Ссылки

Пакеты

Наименование

org.apache.inlong:inlong

maven

Затронутые версииВерсия исправления

>= 1.4.0, < 1.9.0

1.9.0

EPSS

Процентиль: 66%

0.00524

Низкий

6.5 Medium

CVSS3

CVE ID

CVE-2023-43666

Дефекты

CWE-345

Связанные уязвимости

CVE-2023-43666

CVSS3: 6.5

nvd

больше 2 лет назад

Insufficient Verification of Data Authenticity vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0, General user can view all user data like Admin account. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/8623

EPSS

Процентиль: 66%

0.00524

Низкий

6.5 Medium

CVSS3

CVE ID

CVE-2023-43666

Дефекты

CWE-345