Lucene search
ApacheCVELIST:CVE-2023-24977HistoryFeb 01, 2023 - 9:09 a.m.
CVE-2023-24977 Apache InLong: Jdbc Connection causes arbitrary file reading in InLong
2023-02-0109:09:55
CWE-125
apache
www.cve.org
3
cve-2023-24977
apache inlong
jdbc connection
arbitrary file reading
EPSS
0.002
Percentile
52.9%
Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong’s latest version or cherry-pick https://github.com/apache/inlong/pull/7214 https://github.com/apache/inlong/pull/7214 to solve it.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Apache InLong",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThanOrEqual": "1.5.0",
"status": "affected",
"version": "1.1.0",
"versionType": "semver"
}
]
}
]Related
osv
osv
CVE-2023-24977
2023-02-01 10:15:10
Apache InLong contains Out-of-bounds Read vulnerability
2023-02-01 12:32:41
veracode
veracode
Out-Of-Bounds Read
2023-02-02 06:11:10
cve
cve
CVE-2023-24977
2023-02-01 10:15:10
cnvd
cnvd
Apache InLong Information Disclosure Vulnerability
2023-02-03 00:00:00
nvd
nvd
CVE-2023-24977
2023-02-01 10:15:10
github
github
Apache InLong contains Out-of-bounds Read vulnerability
2023-02-01 12:32:41
prion
prion
Cross site scripting
2023-02-01 10:15:00