Apache InLong: JDBC URL bypassing by adding blanks

CVE-2023-31058

Summary

The vulnerability in Apache InLong allows attackers to bypass the 'autoDeserialize' option filtering by inserting blank spaces. This exploit can lead to potential malicious payload execution. Users are strongly encouraged to upgrade to Apache InLong version 1.7.0 or apply relevant patches to mitigate the risk. For more details, refer to the vendor advisory.

References