GHSA-w3wr-gmwf-r333
Apache InLong has Weak Password Requirements in Apache InLong
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.apache.inlong:manager-pojo | >= 1.1.0, < 1.47.0 | 1.47.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong from 1.1.0 through 1.6.0. When users change their password to a simple password (with any character or symbol), attackers can easily guess the user's password and access the account. Users are advised to upgrade to Apache InLong 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7805 to solve it.
References
External links from the advisory. They lead to third-party sites.