org.apache.inlong:manager-pojo (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.apache.inlong:manager-pojo, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (17)

• CVE-2023-31098 — CVSS 9.8 (critical): Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through…
• CVE-2024-26579 — CVSS 9.8 (critical): Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.11.0, the attackers…
• CVE-2023-43668 — CVSS 9.8 (critical): Authorization Bypass Through User-Controlled Key vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0…
• CVE-2023-51784 — CVSS 9.8 (critical): Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0…
• CVE-2023-31062 — CVSS 9.8 (critical): Improper Privilege Management Vulnerabilities in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0…
• CVE-2023-31065 — CVSS 9.1 (critical): Insufficient Session Expiration vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0…
• CVE-2025-27528 — CVSS 9.1 (critical): Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This…
• CVE-2023-34434 — CVSS 7.5 (high): Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0…
• CVE-2023-31058 — CVSS 7.5 (high): Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0…
• CVE-2023-31103 — CVSS 7.5 (high): Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0…
• CVE-2023-31206 — CVSS 7.5 (high): Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0…
• CVE-2023-46227 — CVSS 7.5 (high): Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong: from 1.4.0…
• CVE-2023-51785 — CVSS 7.5 (high): Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers…
• CVE-2025-27522 — CVSS 6.5 (medium): Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This…
• CVE-2025-27526 — CVSS 6.5 (medium): Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This…
• CVE-2023-31101 — CVSS 6.5 (medium): Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong…
• CVE-2023-30465 — CVSS 5.3 (medium): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache…