repository icon
apache / inlong Project repository

Apache InLong - a one-stop, full-scenario integration framework for massive data

Submit a report

FIRST INTERACTION

WITHIN1 DAY

REVIEW

WITHIN24 DAYS

FIX

WITHIN45 DAYS

IDOR make users can delete others' subscription
lujiefsi
High
•CVE-2023-31453
IDOR make users can bind any cluster
lujiefsi
High
•CVE-2023-31454
attackers can change the immutable name and type of cluster
lujiefsi
High
•CVE-2023-31103
attack can change the immutable name and type of nodes
lujiefsi
High
•CVE-2023-31206
Users who joined later can see the data of deleted users
lujiefsi
Medium
•CVE-2023-31101
IDOR make one user can stop, start , delete, edit others' source
lujiefsi
High
•CVE-2023-31066
IDOR make users can withdraw other's application
lujiefsi
High
•CVE-2023-31064
Insufficient Session Expiration
lujiefsi
High
•CVE-2023-31065
Weak Password Implimentation
lujiefsi
High
•CVE-2023-31098