Description
Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. 
Attackers can change the immutable name and type of cluster of InLong. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891 to solve it.


Published: 2023-05-22
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-1993 Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0.  Attackers can change the immutable name and type of cluster of InLong. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891 to solve it.
Github GHSA Github GHSA GHSA-7mhc-76hf-3jp9 Apache InLong Exposure of Resource to Wrong Sphere vulnerability
History

Fri, 11 Oct 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Apache Inlong
cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published:

Updated: 2024-10-11T13:51:46.298Z

Reserved: 2023-04-24T06:24:46.718Z

Link: CVE-2023-31103

cve-icon Vulnrichment

Updated: 2024-08-02T14:45:25.617Z

cve-icon NVD

Status : Modified

Published: 2023-05-22T16:15:10.277

Modified: 2024-11-21T08:01:25.553

Link: CVE-2023-31103

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses