CVE-2023-46227

Published: Oct 19, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can use \t to bypass. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/8814

Affected (1)

Products: Apache: Inlong

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Inlong	From 1.4.0 to 1.9.0

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

https://lists.apache.org/thread/m8txor4f76tmrxksrmc87tw42g57nz33

Source: security@apache.org

Mailing List

https://lists.apache.org/thread/m8txor4f76tmrxksrmc87tw42g57nz33

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

Timeline

No history available yet.