CVE-2023-31098

CVE-2023-31098: Apache InLong: Weak Password Implementation in InLong

Vendor Apache Software Foundation
Product Apache InLong
Weakness CWE-521
Published May 22, 2023
Last update October 11, 2024

CVSS base score

What the vulnerability does

Description

Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.6.0.  When users change their password to a simple password (with any character or symbol), attackers can easily guess the user's password and access the account. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7805 https://github.com/apache/inlong/pull/7805 to solve it.

Key dates

Disclosure timeline

May 22, 2023 CVE published
October 11, 2024 Record updated