Advisories · Technology
Apache Software Foundation Apache InLong.
Every CVE that names Apache Software Foundation Apache InLong among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials
- Apache Software Foundation Apache InLong
- Command injection
- CVSS 5.4 Medium
Apache InLong: Authenticated SSRF via POST /api/node/testConnection
- Apache Software Foundation Apache InLong
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Apache InLong: Agent path traversal via unvalidated file source path
- Apache Software Foundation Apache InLong
- Path traversal
- CVSS 8.1 High
Apache InLong: Missing authorization on DataNode management endpoints
- Apache Software Foundation Apache InLong
- Information disclosure
- CVSS 8.1 High
Apache InLong: Missing authorization in StreamSource forceDelete
- Apache Software Foundation Apache InLong
- Information disclosure
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService
- Apache Software Foundation Apache InLong
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache InLong: SQL Injection via String Concatenation Vulnerability Report
- Apache Software Foundation Apache InLong
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint
- Apache Software Foundation Apache InLong
- SQL injection
- CVSS 5.3 Medium
Apache InLong: Ordinary users can create new packages
- Apache Software Foundation Apache InLong
- Denial of service
- CVSS 4.3 Medium
Apache InLong: Non-template responsible persons can view template information
- Apache Software Foundation Apache InLong
- Denial of service