Apache Software Foundation InLong 1.4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:inlong:1.4.0:*:*:*:*:*:*:*
part: a version: 1.4.0 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Inlong (22b111b8-c50f-5084-bbb7-2e8b9744df8f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/inlong |
purl2cpe | 2026-06-01 10:14:29.639868 |
pkg:github/apache/inlong |
purl2cpe | 2026-06-01 10:14:29.639869 |
pkg:golang/github.com/apache/inlong |
purl2cpe | 2026-06-01 10:14:29.639871 |
pkg:sourceforge/apache-inlong.mirror |
purl2cpe | 2026-06-01 10:14:29.639872 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-26580 |
vulnerable | 2026-06-08 06:31:26.506316 |
Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability
Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.8.0 through 1.10.0, the attackers can
use the specific payload to read from an arbitrary file. Users are advised to upgrade to Apache InLong's 1.11.0 or cherry-pick [1] to solve it.
[1] https://github.com/apache/inlong/pull/9673
Published: 2024-03-06T12:07:28.140Z
Updated: 2025-02-13T17:41:17.092Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30465 |
vulnerable | 2026-06-08 06:04:39.417055 |
Apache InLong: SQL injection in apache inLong 1.5.0
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the "orderType" parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the user with ID 1 from the "user" table, one character at a time. Users are advised to upgrade to Apache InLong's 1.6.0 or cherry-pick [1] to solve it.
https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html
[1] https://github.com/apache/inlong/issues/7529 https://github.com/apache/inlong/issues/7529
Published: 2023-04-11T14:35:11.308Z
Updated: 2025-02-13T16:49:29.206Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.