Apache Software Foundation InLong 1.5.0
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:inlong:1.5.0:*:*:*:*:*:*:*
part: a version: 1.5.0 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Inlong (22b111b8-c50f-5084-bbb7-2e8b9744df8f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/inlong |
purl2cpe | 2026-06-01 10:14:29.639873 |
pkg:github/apache/inlong |
purl2cpe | 2026-06-01 10:14:29.639875 |
pkg:golang/github.com/apache/inlong |
purl2cpe | 2026-06-01 10:14:29.639876 |
pkg:sourceforge/apache-inlong.mirror |
purl2cpe | 2026-06-01 10:14:29.639877 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-31101 |
vulnerable | 2026-06-08 06:04:41.862106 |
Apache InLong: Users who joined later can see the data of deleted users
Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.6.0. Users registered in InLong who joined later can see deleted users' data. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7836 https://github.com/apache/inlong/pull/7836 to solve it.
Published: 2023-05-22T15:17:42.609Z
Updated: 2024-10-11T13:53:51.731Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30465 |
vulnerable | 2026-06-08 06:04:39.417774 |
Apache InLong: SQL injection in apache inLong 1.5.0
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the "orderType" parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the user with ID 1 from the "user" table, one character at a time. Users are advised to upgrade to Apache InLong's 1.6.0 or cherry-pick [1] to solve it.
https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html
[1] https://github.com/apache/inlong/issues/7529 https://github.com/apache/inlong/issues/7529
Published: 2023-04-11T14:35:11.308Z
Updated: 2025-02-13T16:49:29.206Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.