Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-79657
HistorySep 22, 2022 - 12:00 a.m.

Apache InLong deserialization vulnerability

2022-09-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
apache inlong
deserialization
vulnerability
remote code execution
apache foundation

EPSS

0.003

Percentile

70.2%

Apache InLong is the U.S. Apache (Apache) Foundation’s one-stop framework for integrating massive amounts of data. A deserialization vulnerability exists in versions prior to Apache InLong 1.3.0, which stems from insecure deserialization of serialized data received from users and can be exploited by an attacker with certain privileges to remotely execute code.

EPSS

0.003

Percentile

70.2%