CVE-2023-31206

CVE-2023-31206: Apache InLong: Attackers can change the immutable name and type of nodes

Vendor Apache Software Foundation
Product Apache InLong
Weakness CWE-668
Published May 22, 2023
Last update October 11, 2024

CVSS base score

What the vulnerability does

Description

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of nodes of InLong. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick [1] to solve it. [1] https://cveprocess.apache.org/cve5/[1]%C2%A0https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891

Key dates

Disclosure timeline

May 22, 2023 CVE published
October 11, 2024 Record updated