Apache · Apache Inlong · CVE-2023-31066
**Name of the Vulnerable Software and Affected Versions**
Apache InLong versions 1.4.0 through 1.6.0
**Description**
The issue is related to the use of files and directories accessible to external parties, which can be exploited by a remote attacker to execute arbitrary code. Different users in InLong could delete, edit, stop, and start others' sources.
**Recommendations**
For Apache InLong versions 1.4.0 through 1.6.0, upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7775 to solve the issue. As a temporary workaround, consider restricting access to sensitive sources and directories to minimize the risk of exploitation.