Riskcovery

CVE-2023-34189

Apache InLong: General user can delete and update process

State
Published
Severity
Not scored
Published
Jul 25, 2023
Updated
Feb 13, 2025
Reserved
May 30, 2023

Read the record on cve.org

Description

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could use general users to delete and update the process, which only the admin can operate occurrences.

Users are advised to upgrade to Apache InLong's 1.8.0 or cherry-pick https://github.com/apache/inlong/pull/8109  to solve it.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-668 Exposure of Resource to Wrong Sphere

Affected Products

ProductVersions
Apache InLongApache Software Foundation
  • 1.4.0 through 1.7.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.