CVE-2023-43666: Insufficient Verification of Data Authenticity

October 16, 2023 (updated October 17, 2023)

Insufficient Verification of Data Authenticity vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0,

General user can view all user data like Admin account.

Users are advised to upgrade to Apache InLong’s 1.9.0 or cherry-pick [1] to solve it.

[1] https://github.com/apache/inlong/pull/8623

References

github.com/advisories/GHSA-wj6q-chpv-mcrx
github.com/apache/inlong/pull/8623
lists.apache.org/thread/scbgh3ty3xcxm3q33r2t9f42gwwo1why
nvd.nist.gov/vuln/detail/CVE-2023-43666

Code Behaviors & Features

Detect and mitigate CVE-2023-43666 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →