https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 13:56:42 +0000 https://cve.radiocsirt.org/vuln/cnvd-2023-42968 cnvd-2023-42968 https://cve.radiocsirt.org/vuln/cnvd-2023-42968 https://cve.radiocsirt.org/vuln/euvd-2026-216430 EUVD-2026-216430 https://cve.radiocsirt.org/vuln/euvd-2026-216430 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30465 <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the &#34;orderType&#34; parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the   user with ID 1 from the &#34;user&#34; table, one character at a time.  Users are advised to upgrade to Apache InLong&#39;s 1.6.0 or cherry-pick [1] to solve it. https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html</p> <p>[1] https://github.com/apache/inlong/issues/7529 https://github.com/apache/inlong/issues/7529</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the &#34;orderType&#34; parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the   user with ID 1 from the &#34;user&#34; table, one character at a time.  Users are advised to upgrade to Apache InLong&#39;s 1.6.0 or cherry-pick [1] to solve it. https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html</p> <p>[1] https://github.com/apache/inlong/issues/7529 https://github.com/apache/inlong/issues/7529</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-30465 https://cve.radiocsirt.org/vuln/ghsa-cqr6-3x3f-9wr3 <p><strong>Affected:</strong> Maven: org.apache.inlong:manager-pojo, Maven: org.apache.inlong:manager-service</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the &#34;orderType&#34; parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the   user with ID 1 from the &#34;user&#34; table, one character at a time.  Users are advised to upgrade to Apache InLong&#39;s 1.6.0 or cherry-pick PR #7530 to solve it.</p> <p><strong>Affected:</strong> Maven: org.apache.inlong:manager-pojo, Maven: org.apache.inlong:manager-service</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the &#34;orderType&#34; parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the   user with ID 1 from the &#34;user&#34; table, one character at a time.  Users are advised to upgrade to Apache InLong&#39;s 1.6.0 or cherry-pick PR #7530 to solve it.</p> https://cve.radiocsirt.org/vuln/ghsa-cqr6-3x3f-9wr3 https://cve.radiocsirt.org/vuln/gsd-2023-30465 gsd-2023-30465 https://cve.radiocsirt.org/vuln/gsd-2023-30465