apache/inlong · Security
Apache InLong: JDBC Vulnerability during verification processing
- GHSA ID
- GHSA-r324-vgr5-73c9
- CVE ID
- CVE-2025-27522
- Severity
- high
- Published
- Updated
- CVSS v4
- 8.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Description
Deserialization of Untrusted Data vulnerability in Apache InLong.
This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.
[1]
CWEs
- CWE-502 · Deserialization of Untrusted Data