Lucene search

K
osvGoogleOSV:CVE-2023-46227
HistoryOct 19, 2023 - 10:15 a.m.

CVE-2023-46227

2023-10-1910:15:10
Google
osv.dev
5
apache
inlong
1.4.0-1.8.0
1.9.0
vulnerability
deserialization
patch

AI Score

7

Confidence

High

EPSS

0.001

Percentile

45.7%

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.

This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can use \t to bypass.Β Users are advised to upgrade to Apache InLong’s 1.9.0 or cherry-pick [1] to solve it.

[1] https://github.com/apache/inlong/pull/8814

AI Score

7

Confidence

High

EPSS

0.001

Percentile

45.7%