GHSA-wx79-r3q8-fq9h

Source

https://github.com/advisories/GHSA-wx79-r3q8-fq9h

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/07/GHSA-wx79-r3q8-fq9h/GHSA-wx79-r3q8-fq9h.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-wx79-r3q8-fq9h

Aliases

CVE-2023-31066

Published

2023-07-06T21:14:59Z

Modified

2023-11-10T06:01:51.934747Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator

Summary

Apache InLong has Files or Directories Accessible to External Parties in Apache InLong

Details

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong: from 1.4.0 through 1.6.0. Different users in InLong could delete, edit, stop, and start others' sources. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7775 to solve it.

Database specific

{
    "nvd_published_at": "2023-05-22T16:15:10Z",
    "cwe_ids": [
        "CWE-552"
    ],
    "severity": "CRITICAL",
    "github_reviewed": true,
    "github_reviewed_at": "2023-07-06T23:28:55Z"
}

References

Affected packages

Maven / org.apache.inlong:manager-service

Package

Name: org.apache.inlong:manager-service; View open source insights on deps.dev
Purl: pkg:maven/org.apache.inlong/manager-service

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.4.0

Fixed

1.7.0

Affected versions

1.*

1.4.0

1.5.0

1.6.0

Maven / org.apache.inlong:manager-web