SQL Injection in Apache InLong
Summary
CVE-2023-43667: SQL Injection in Apache InLong. Affects org.apache.inlong:inlong versions >= 1.4.0, < 1.8.0. Fixed in 1.8.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache InLong is an open-source project that provides a distributed data processing platform for real-time streaming data. It allows users to collect, process, and analyze data from various sources. The project is widely used in data-intensive applications and provides a scalable and reliable solution for data processing. However, a vulnerability has been discovered in Apache InLong that allows for SQL injection attacks.
Vulnerability Detail
The SQL Injection vulnerability in Apache InLong occurs due to improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to manipulate SQL queries and potentially execute arbitrary SQL commands. By exploiting this vulnerability, an attacker can create misleading or false records, making it harder to audit and trace malicious activities. The vulnerability affects Apache InLong versions 1.4.0 through 1.8.0.
How To Fix
Latest published version: 2.4.0 as of 22 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.8.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The SQL Injection vulnerability in Apache InLong can have serious implications for data integrity and security. It is crucial for users to upgrade to the latest version or apply the recommended fix to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.apache.inlong:inlong →
FAQ
Apache InLong is an open-source distributed data processing platform for real-time streaming data.
SQL Injection is a type of vulnerability that allows an attacker to manipulate SQL queries and potentially execute arbitrary SQL commands.
The SQL Injection vulnerability in Apache InLong can allow an attacker to create misleading or false records, making it harder to audit and trace malicious activities.
The vulnerability affects Apache InLong versions 1.4.0 through 1.8.0.
To fix this vulnerability, users are advised to upgrade to Apache InLong version 1.8.0 or apply the fix from the provided pull request.
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.inlong:inlong.
