Apache Inlong
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_inlong:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Inlong (25a18746-4691-5733-b948-a230d5b81d17) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-27531 |
vulnerable | 2026-06-08 07:14:55.273869 |
Apache InLong: An arbitrary file read vulnerability for JDBC
Deserialization of Untrusted Data vulnerability in Apache InLong.
This issue affects Apache InLong: from 1.13.0 before 2.1.0,
this issue would allow an authenticated attacker to read arbitrary files by double writing the param.
Users are recommended to upgrade to version 2.1.0, which fixes the issue.
Published: 2025-06-06T14:55:28.516Z
Updated: 2025-06-10T15:30:50.280Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27528 |
vulnerable | 2026-06-08 07:14:55.273577 |
Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read
Deserialization of Untrusted Data vulnerability in Apache InLong.
This issue affects Apache InLong: from 1.13.0 through 2.1.0.
This
vulnerability allows attackers to bypass the security mechanisms of InLong
JDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.
[1] https://github.com/apache/inlong/pull/11747
Published: 2025-05-28T08:12:27.609Z
Updated: 2025-05-28T13:20:49.864Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27526 |
vulnerable | 2026-06-08 07:14:55.273262 |
Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass
Deserialization of Untrusted Data vulnerability in Apache InLong.
This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.
[1] https://github.com/apache/inlong/pull/11747
Published: 2025-05-28T08:07:35.440Z
Updated: 2025-05-28T14:00:41.948Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27522 |
vulnerable | 2026-06-08 07:14:55.270279 |
Apache InLong: JDBC Vulnerability during verification processing
Deserialization of Untrusted Data vulnerability in Apache InLong.
This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.
[1]
https://github.com/apache/inlong/pull/11732
Published: 2025-05-28T08:06:04.191Z
Updated: 2026-01-28T19:39:59.185Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36268 |
vulnerable | 2026-06-08 06:39:44.063381 |
Apache InLong TubeMQ Client: Remote Code Execution vulnerability
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.
This issue affects Apache InLong: from 1.10.0 through 1.12.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.13.0 or cherry-pick [1] to solve it.
[1] https://github.com/apache/inlong/pull/10251
Published: 2024-08-02T09:44:26.237Z
Updated: 2024-08-22T19:40:19.635Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26580 |
vulnerable | 2026-06-08 06:31:26.506373 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26579 |
vulnerable | 2026-06-08 06:31:26.503214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51785 |
vulnerable | 2026-06-08 06:17:53.987124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51784 |
vulnerable | 2026-06-08 06:17:53.985380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46227 |
vulnerable | 2026-06-08 06:12:44.439746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43668 |
vulnerable | 2026-06-08 06:12:37.690786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43667 |
vulnerable | 2026-06-08 06:12:37.690382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43666 |
vulnerable | 2026-06-08 06:12:37.688721 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35088 |
vulnerable | 2026-06-08 06:06:26.537005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34434 |
vulnerable | 2026-06-08 06:06:25.580714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34189 |
vulnerable | 2026-06-08 06:06:24.770168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31454 |
vulnerable | 2026-06-08 06:04:43.150013 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31453 |
vulnerable | 2026-06-08 06:04:43.149595 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31206 |
vulnerable | 2026-06-08 06:04:42.180631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31103 |
vulnerable | 2026-06-08 06:04:41.873465 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31101 |
vulnerable | 2026-06-08 06:04:41.862061 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31098 |
vulnerable | 2026-06-08 06:04:41.811414 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31066 |
vulnerable | 2026-06-08 06:04:41.740058 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31065 |
vulnerable | 2026-06-08 06:04:41.739656 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31064 |
vulnerable | 2026-06-08 06:04:41.739085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31062 |
vulnerable | 2026-06-08 06:04:41.738598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31058 |
vulnerable | 2026-06-08 06:04:41.735266 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30465 |
vulnerable | 2026-06-08 06:04:39.415876 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27296 |
vulnerable | 2026-06-08 05:57:40.816466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24997 |
vulnerable | 2026-06-08 05:56:08.299901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24977 |
vulnerable | 2026-06-08 05:56:08.292555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40955 |
vulnerable | 2026-06-08 05:48:28.339094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.