GHSA-r324-vgr5-73c9

ghsaUSosv

Apache InLong: JDBC Vulnerability during verification processing

view advisory published 2025-05-28Licence: CC-BY-4.0

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/11732

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-27522US	—	0.90% (59th)	—	2025-05-28
Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for…

references

External citations — patches, advisories, analysis.

https://github.com/apache/inlongPACKAGE
https://github.com/apache/inlong/commit/86c893cfd8f7ba9ffce5d20abef6cd360f502fdfWEB
https://github.com/apache/inlong/pull/11732WEB
https://lists.apache.org/thread/s4dnmq3gwcjocxf85qk190knlzd26jbyWEB
https://nvd.nist.gov/vuln/detail/CVE-2025-27522ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan