CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
Percentile
61.1%
Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. TheΒ attacker can delete othersβ subscriptions, even if they are not the owner
of the deleted subscription.Β Users are advised to upgrade to Apache InLongβs 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7949 to solve it.