CVE-2023-34189

CVE-2023-34189: Apache InLong: General user can delete and update process

Vendor Apache Software Foundation
Product Apache InLong
Weakness CWE-668
Published July 25, 2023
Last update February 13, 2025

CVSS base score

What the vulnerability does

Description

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could use general users to delete and update the process, which only the admin can operate occurrences.  Users are advised to upgrade to Apache InLong's 1.8.0 or cherry-pick https://github.com/apache/inlong/pull/8109  to solve it.

Key dates

Disclosure timeline

July 25, 2023 CVE published
February 13, 2025 Record updated