You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by Charles Zhang <do...@apache.org> on 2025/02/28 04:04:18 UTC

CVE-2025-27531: Apache InLong: An arbitrary file read vulnerability for JDBC

Severity: moderate

Affected versions:

- Apache InLong 1.13.0 before 2.1.0

Description:

Deserialization of Untrusted Data vulnerability in Apache InLong. 

This issue affects Apache InLong: from 1.13.0 before 2.1.0, this can lead to bypass by double writing the param.





Users are recommended to upgrade to version 2.1.0, which fixes the issue.

Credit:

Ming (finder)

References:

https://inlong.apache.org
https://www.cve.org/CVERecord?id=CVE-2025-27531