What is GHSA-3p9p-59qf-mqwh?

GHSA-3p9p-59qf-mqwh is a security advisory published by GitHub Security Advisories with High severity. Apache InLong has Files or Directories Accessible to External Parties

Which CVE IDs does GHSA-3p9p-59qf-mqwh cover?

GHSA-3p9p-59qf-mqwh covers the following CVE IDs: CVE-2023-31064. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3p9p-59qf-mqwh?

GHSA-3p9p-59qf-mqwh has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-3p9p-59qf-mqwh?

GHSA-3p9p-59qf-mqwh affects 1 product, including: maven/org.apache.inlong:manager-workflow:\u003e= 1.2.0, \u003c 1.7.0.

GHSA-3p9p-59qf-mqwhHighCVSS 7.5

Apache InLong has Files or Directories Accessible to External Parties

Vendor

GitHub Security Advisories

Published

July 6, 2023

Last Modified

November 10, 2023

🔗 CVE IDs covered (1)

CVE-2023-31064 →

📋 Description

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong from 1.2.0 through 1.6.0.The user in InLong could cancel an application that doesn't belong to it. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7799 to solve it.

🎯 Affected products1

maven/org.apache.inlong:manager-workflow:>= 1.2.0, < 1.7.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-31064
https://lists.apache.org/thread/1osd2k3t3qol2wdsswqtr9gxdkf78n00
https://github.com/apache/inlong/pull/7799
https://github.com/advisories/GHSA-3p9p-59qf-mqwh