CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Apache, GitHub.
CVE
CVE-2023-31453
Severity
HIGH
CVSS
7.5
EPSS
1.18%
Apache GitHub
Original NVD Description
Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. The attacker can delete others' subscriptions, even if they are not the owner of the deleted subscription. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/7949 https://github.com/apache/inlong/pull/7949
Related CVEs
Other vulnerabilities affecting the same vendor(s)