Deserialization of Untrusted Data vulnerability in Apache InLong.
This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.
[1]
https://github.com/apache/inlong/pull/11732
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/apache/inlong/pull/11732 | Issue Tracking |
| https://lists.apache.org/thread/s4dnmq3gwcjocxf85qk190knlzd26jby | Vendor Advisory |
Configurations
History
03 Jun 2025, 14:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lists.apache.org/thread/s4dnmq3gwcjocxf85qk190knlzd26jby - Vendor Advisory | |
| References | () https://github.com/apache/inlong/pull/11732 - Issue Tracking | |
| First Time |
Apache inlong
Apache |
|
| CPE | cpe:2.3:a:apache:inlong:*:*:*:*:*:*:*:* |
28 May 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
28 May 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-28 08:15
Updated : 2025-06-03 14:09
NVD link : CVE-2025-27522
Mitre link : CVE-2025-27522
JSON object : View
Products Affected
apache
- inlong
CWE
No CWE.