Apache InLong Deserialization Vulnerability (CNVD-2023-25936)

Apache InLong is the U.S. Apache (Apache) Foundation’s one-stop framework for integrating massive amounts of data. Apache InLong versions 1.1.0 through 1.5.0 contain a deserialization vulnerability that stems from insecure deserialization processing of serialized data submitted by the application upon receipt by the user, which could be exploited by an attacker to cause code execution.