CVE-2023-51784: Apache InLong Manager Remote Code Execution vulnerability

January 3, 2024 (updated February 13, 2025)

Improper Control of Generation of Code (‘Code Injection’) vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong’s 1.10.0 or cherry-pick [1] to solve it.

[1] https://github.com/apache/inlong/pull/9329

References

github.com/advisories/GHSA-9xg9-hh45-xcm6
github.com/apache/inlong
github.com/apache/inlong/commit/1607837be28438c0ccae8da15afb653f2afed090
github.com/apache/inlong/pull/9329
lists.apache.org/thread/4nxbyl6mh5jgh0plk0qposbxwn6w9h8j
nvd.nist.gov/vuln/detail/CVE-2023-51784

Code Behaviors & Features

Detect and mitigate CVE-2023-51784 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →