Description

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Different users in InLong could delete, edit, stop, and start others' sources! Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7775 https://github.com/apache/inlong/pull/7775 to solve it.

Remediation

References

https://lists.apache.org/thread/x7y05wo37sq5l9fnmmsjh2dr9kcjrcxf

Related Vulnerabilities

CVE-2023-35156 Vulnerability in maven package org.xwiki.platform:xwiki-platform-flamingo-skin-resources

CVE-2021-36774 Vulnerability in maven package org.apache.kylin:kylin-core-common

CVE-2023-37544 Vulnerability in maven package org.apache.pulsar:pulsar-websocket

CVE-2020-13931 Vulnerability in maven package org.apache.tomee:openejb-loader

CVE-2021-31812 Vulnerability in maven package org.apache.pdfbox:pdfbox

Severity

Critical

Classification

CWE-552 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Tags

Mailing List Vendor Advisory