GHSA-3p9p-59qf-mqwh
Apache InLong has Files or Directories Accessible to External Parties
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.apache.inlong:manager-workflow | >= 1.2.0, < 1.7.0 | 1.7.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong from 1.2.0 through 1.6.0.The user in InLong could cancel an application that doesn't belong to it. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7799 to solve it.
References
External links from the advisory. They lead to third-party sites.