Insufficient Verification of Data Authenticity in Apache InLong
Summary
CVE-2023-43666: Insufficient Verification of Data Authenticity in Apache InLong. Affects org.apache.inlong:inlong versions >= 1.4.0, < 1.9.0. Fixed in 1.9.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache InLong is an open-source project that provides a distributed processing framework for real-time data streaming. It allows users to collect, process, and analyze large volumes of data in real-time. The project is widely used in various industries for data integration and data processing tasks. However, a vulnerability has been discovered in Apache InLong that allows general users to view all user data, including the admin account.
Vulnerability Detail
The vulnerability in Apache InLong is due to insufficient verification of data authenticity. This means that an attacker can manipulate the data sent to the application and view sensitive information, such as the admin account. This can lead to unauthorized access and potential data breaches. The vulnerability affects Apache InLong versions 1.4.0 through 1.8.0.
How To Fix
Latest published version: 2.4.0 as of 22 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.9.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Users are recommended to apply the fix mentioned in the 'how_to_fix' section.
Conclusion
The vulnerability in Apache InLong allows unauthorized access to user data, including the admin account. Users are advised to upgrade to version 1.9.0 or apply the provided fix to ensure proper verification of data authenticity. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for org.apache.inlong:inlong →
FAQ
Apache InLong is an open-source distributed processing framework for real-time data streaming. It is used for collecting, processing, and analyzing large volumes of data in real-time.
The vulnerability allows general users to view all user data, including the admin account. This can lead to unauthorized access and potential data breaches.
The vulnerability affects Apache InLong versions 1.4.0 through 1.8.0.
To fix this vulnerability, users are advised to upgrade to Apache InLong version 1.9.0. Alternatively, users can cherry-pick the fix from the provided pull request.
There is no specific workaround mentioned for this vulnerability. Users are recommended to apply the fix mentioned in the 'how_to_fix' section.
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.inlong:inlong.
