Lucene search
GoogleOSV:CVE-2023-31454HistoryMay 22, 2023 - 2:15 p.m.
CVE-2023-31454
2023-05-2214:15:09
Google
osv.dev
6
cve-2023-31454
apache inlong
critical resource vulnerability
Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0.
The attacker can bind any cluster, even if he is not the cluster owner. Users are advised to upgrade to Apache InLong’s 1.7.0 or cherry-pick [1] to solve it.[1]
https://github.com/apache/inlong/pull/7947 https://github.com/apache/inlong/pull/7947
Related
huntr
huntr
IDOR make users can bind any cluster
2023-04-17 09:16:05
github
github
cnvd
cnvd
Apache InLong Security Bypass Vulnerability (CNVD-2023-42959)
2023-05-28 00:00:00
nvd
nvd
CVE-2023-31454
2023-05-22 14:15:09
cvelist
cvelist
CVE-2023-31454 Apache InLong: IDOR make users can bind any cluster
2023-05-22 13:23:17
prion
prion
Design/Logic Flaw
2023-05-22 14:15:00
osv
osv
cve
cve
CVE-2023-31454
2023-05-22 14:15:09