CVE-2023-34189

MediumCVSS 6.5

Published: 25/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.93%

56th percentile - higher than 56% of all known CVEs

Summary

The 'Exposure of Resource to Wrong Sphere' vulnerability in Apache InLong (versions 1.4.0 to 1.7.0) allows an attacker to use general users to delete and update processes that should only be operable by admins.

Risk Assessment

This could lead to unauthorized changes in the system, posing a serious threat to data integrity and security.

Recommendation

It is recommended to upgrade to Apache InLong version 1.8.0 or apply the patch from https://github.com/apache/inlong/pull/8109.

Original NVD description (English source)

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could use general users to delete and update the process, which only the admin can operate occurrences. Users are advised to upgrade to Apache InLong's 1.8.0 or cherry-pick https://github.com/apache/inlong/pull/8109 to solve it.