GHSA-qff2-8qw7-hcvw

ghsaUSosv

Apache Inlong Code Injection vulnerability

view advisory published 2024-08-02Licence: CC-BY-4.0

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong. This issue affects Apache InLong: from 1.10.0 through 1.12.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.13.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/10251

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-36268US	critical9.8	1.17% (67th)	—	2024-08-02
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong. This issue affects Apache InLong: from 1.10.0 through 1.12.0, which could lead to Remote…

references

External citations — patches, advisories, analysis.

https://github.com/apache/inlong/commit/85fc8b02e69badc5103fadb77559a921c788537aWEB
https://github.com/apache/inlong/pull/10251WEB
https://lists.apache.org/thread/1w1yp1bg5sjvn46dszkf00tz1vfs0frcWEB
https://nvd.nist.gov/vuln/detail/CVE-2024-36268ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan