CVE-2023-46227: Deserialization of Untrusted Data

October 19, 2023

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.

This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can use \t to bypass. Users are advised to upgrade to Apache InLong’s 1.9.0 or cherry-pick [1] to solve it.

[1] https://github.com/apache/inlong/pull/8814

References

github.com/advisories/GHSA-jj32-3pf5-5mv5
github.com/apache/inlong/pull/8814
lists.apache.org/thread/m8txor4f76tmrxksrmc87tw42g57nz33
nvd.nist.gov/vuln/detail/CVE-2023-46227

Code Behaviors & Features

Detect and mitigate CVE-2023-46227 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →