Apache InLong Manager Remote Code Execution vulnerability
Critical severity
GitHub Reviewed
Published
Jan 3, 2024
to the GitHub Advisory Database
•
Updated Jan 3, 2024
Package
Affected versions
>= 1.5.0, < 1.10.0
Patched versions
1.10.0
Description
Published by the National Vulnerability Database
Jan 3, 2024
Published to the GitHub Advisory Database
Jan 3, 2024
Reviewed
Jan 3, 2024
Last updated
Jan 3, 2024
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it.
[1] apache/inlong#9329
References