Lucene search
GoogleOSV:CVE-2023-34434HistoryJul 25, 2023 - 8:15 a.m.
CVE-2023-34434
2023-07-2508:15:10
Google
osv.dev
7
cve-2023-34434
apache software foundation
arbitrary file reading
Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0.
The attacker could bypass the current logic and achieve arbitrary file reading. To solve it, users are advised to upgrade to Apache InLong’s 1.8.0 or cherry-pick https://github.com/apache/inlong/pull/8130 .
Related
prion
prion
Deserialization of untrusted data
2023-07-25 08:15:00
veracode
veracode
Deserialization Of Untrusted Data
2023-07-26 02:46:43
osv
osv
JDBC URL bypassing by allowLoadLocalInfileInPath param
2023-07-25 09:30:18
github
github
JDBC URL bypassing by allowLoadLocalInfileInPath param
2023-07-25 09:30:18
cvelist
cvelist
cnvd
cnvd
Apache InLong Deserialization Vulnerability (CNVD-2023-70280)
2023-07-30 00:00:00
nvd
nvd
CVE-2023-34434
2023-07-25 08:15:10
cve
cve
CVE-2023-34434
2023-07-25 08:15:10