PT-2023-23156 · Apache · Apache Inlong

Lujie.Ac.Cn · Publicado 2023-05-22 · Atualizado 2023-05-27 · CVE-2023-31101

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache InLong versions 1.5.0 through 1.6.0

Description This issue allows users registered in InLong who joined later to see deleted users' data. The problem is related to insecure default initialization of resources.

Recommendations For Apache InLong versions 1.5.0 through 1.6.0, upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7836 to solve the issue.

Correção

Enumeração de Fraquezas

CWE-1188

Identificadores relacionados

CVE-2023-31101

GHSA-H79M-5CM2-278C

Produtos afetados

Apache Inlong

Referências · 7

• https://github.com/apache/inlong · Nota
• https://github.com/apache/inlong/pull/7836 · Nota
• https://osv.dev/vulnerability/CVE-2023-31101 · Aviso do Fabricante
• https://lists.apache.org/thread/shvwwr6toqz5rr39rwh4k03z08sh9jmr · Aviso do Fabricante
• https://t.me/cibsecurity/64556 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-31101 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-h79m-5cm2-278c · Aviso do Fabricante