Apache InLong Exposure of Resource to Wrong Sphere vulnerability

高 7.5CVE-2023-31206 · GHSA-f475-jgg3-3jwc · 22/05/2023 公開 · 17/06/2026 更新

要点

CVE-2023-31206 は org.apache.inlong:manager-dao, org.apache.inlong:manager-pojo, org.apache.inlong:manager-service に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：1.2%（全脆弱性の 69.3% より高い）。
対処：1.7.0 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
org.apache.inlong:manager-dao Maven	`≥ 1.4.0, < 1.7.0`	`1.7.0`
org.apache.inlong:manager-pojo Maven	`≥ 1.4.0, < 1.7.0`	`1.7.0`
org.apache.inlong:manager-service Maven	`≥ 1.4.0, < 1.7.0`	`1.7.0`
org.apache.inlong:manager-test Maven	`≥ 1.4.0, < 1.7.0`	`1.7.0`
org.apache.inlong:manager-web Maven	`≥ 1.4.0, < 1.7.0`	`1.7.0`
inlong apache	`≥ 1.4.0, ≤ 1.6.0`	修正版なし

概要

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of nodes of InLong. Users are advised to upgrade to Apache InLong 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7891 to solve it.

NVD の説明

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of nodes of InLong. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick [1] to solve it. [1] https://cveprocess.apache.org/cve5/[1]%C2%A0https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891