PT-2023-22706 · Apache · Apache Inlong

Escape Wang · Published 2023-04-11 · Updated 2024-10-22 · CVE-2023-30465

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache InLong versions 1.4.0 through 1.5.0

Description The issue is related to an SQL Injection vulnerability. By manipulating the orderType parameter, an attacker can extract the username of the user with ID 1 from the "user" table, one character at a time, using an SQL injection attack.

Recommendations To resolve the issue, upgrade to Apache InLong's 1.6.0 or cherry-pick the fix from PR #7529 or PR #7530. As a temporary workaround, consider restricting access to the orderType parameter to minimize the risk of exploitation.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-30465

GHSA-CQR6-3X3F-9WR3

Affected Products

Apache Inlong

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2023-30465 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30465 · Vendor Advisory
• https://lists.apache.org/thread/mrh4nr3jrlbj6nxkn4q8hddbfh1pnok0 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cqr6-3x3f-9wr3 · Vendor Advisory
• https://github.com/apache/inlong · Note
• https://github.com/apache/inlong/issues/7529 · Note
• https://github.com/apache/inlong/pull/7530 · Note
• https://t.me/pentestingnews/34918 · Telegram Post
• https://inlong.apache.org/zh-CN/download/release-1.6.0 · Note
• http://openwall.com/lists/oss-security/2023/04/11/2 · Note
• https://t.me/cvenotify/48514 · Telegram Post
• https://t.me/cvenotify/47997 · Telegram Post
• https://t.me/cibsecurity/61874 · Telegram Post