CVE-2023-31103: Apache InLong: Attackers can change the immutable name and type of cluster

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-05-22 · updated 2026-06-17
Weakness: CWE-668

Description

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of cluster of InLong. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891 to solve it.

Affected products

Apache Software Foundation Apache InLong: from 1.4.0 through 1.6.0

References

https://lists.apache.org/thread/bv51zhjookcnfbz8b0xsl9wv78sn0j1p
https://lists.apache.org/thread/bv51zhjookcnfbz8b0xsl9wv78sn0j1p

Get alerted when CVE-2023-31103 or the next vulnerability affects your stack