CVE-2023-46227
CVSS V2 None
CVSS V3 None
Description
Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.
This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can use \t to bypass. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it.
[1] https://github.com/apache/inlong/pull/8814
Overview
- CVE ID
- CVE-2023-46227
- Assigner
- apache
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-10-19T09:40:46.423Z
- Last Modified Date
- 2023-10-19T09:40:46.423Z
Weakness Enumerations
References
Reference URL | Reference Tags |
---|---|
https://lists.apache.org/thread/m8txor4f76tmrxksrmc87tw42g57nz33 | vendor-advisory |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-46227 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46227 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2024-06-24 22:20:44 | Added to TrackCVE |