GHSA-7mhc-76hf-3jp9
GitHub Security Advisory
Apache InLong Exposure of Resource to Wrong Sphere vulnerability
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of cluster of InLong. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7891 to solve it.
Affected Packages
Maven
org.apache.inlong:manager-pojo
Affected versions:
1.4.0
(fixed in 1.7.0)
Maven
org.apache.inlong:manager-dao
Affected versions:
1.4.0
(fixed in 1.7.0)
Maven
org.apache.inlong:manager-service
Affected versions:
1.4.0
(fixed in 1.7.0)
Maven
org.apache.inlong:manager-test
Affected versions:
1.4.0
(fixed in 1.7.0)
Maven
org.apache.inlong:manager-web
Affected versions:
1.4.0
(fixed in 1.7.0)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 27, 2025 6:35 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.