Apache InLong has Files or Directories Accessible to External Parties

ALTO 7.5CVE-2023-31064 · GHSA-3p9p-59qf-mqwh · Published 22/05/2023 · updated 17/06/2026

In breve

CVE-2023-31064 è una vulnerabilità ALTO (CVSS 7.5) che riguarda org.apache.inlong:manager-workflow, inlong (apache).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 69.3% delle vulnerabilità.
Correzione: aggiornare a 1.7.0 o successiva.

Package	Affected versions	Patched versions
org.apache.inlong:manager-workflow Maven	`≥ 1.2.0, < 1.7.0`	`1.7.0`
inlong apache	`≥ 1.2.0, ≤ 1.6.0`	No fix yet

Description

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong from 1.2.0 through 1.6.0.The user in InLong could cancel an application that doesn't belong to it. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7799 to solve it.

NVD description

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. the user in InLong could cancel an application that doesn't belongs to it. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7799 https://github.com/apache/inlong/pull/7799 to solve it.

References

nvd.nist.gov/vuln/detail/CVE-2023-31064 · ADVISORY
apache/inlong#7799 · WEB
apache/inlong · PACKAGE
lists.apache.org/thread/1osd2k3t3qol2wdsswqtr9gxdkf78n00 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.inlong:manager-workflow

Maven

≥ 1.2.0, < 1.7.0

1.7.0

inlong

apache

≥ 1.2.0, ≤ 1.6.0

No fix yet

Description

NVD description