Deserialization of Untrusted Data... CVE-2024-26580

- AV AC AU C I A
发布: 2024-03-06
修订: 2024-03-06

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.8.0 through 1.10.0, the attackers can use the specific payload to read from an arbitrary file. Users are advised to upgrade to Apache InLong's 1.11.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/9673

0%
暂无可用Exp或PoC
当前有0条受影响产品信息