Vulnerabilities

TI-2026-45020 CVE-2026-63044 · GHSA-qvfh-v498-xrrf

Apache InLong: Authenticated SSRF via POST /api/node/testConnection

LOW 25

Server-Side Request Forgery (SSRF) vulnerability in Apache InLong.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00504 Published 2026-08-20 Fixed in 2.4.0 CWE-918

TI-2026-45019 CVE-2026-63043 · GHSA-834h-qg75-5mr8

MEDIUM 40

Relative Path Traversal vulnerability in Apache InLong.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00808 Published 2026-08-20 Fixed in 2.4.0 CWE-23

TI-2026-45018 CVE-2026-63042 · GHSA-jmq8-hg35-36h2

LOW 36

Files or Directories Accessible to External Parties vulnerability in Apache InLong.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00644 Published 2026-08-20 Fixed in 2.4.0 CWE-552

TI-2026-45016 CVE-2026-63040 · GHSA-3q63-2qmj-vfp6

LOW 36

Files or Directories Accessible to External Parties vulnerability in Apache InLong.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00644 Published 2026-08-20 Fixed in 2.4.0 CWE-552

TI-2026-45015 CVE-2026-63039 · GHSA-pg4r-4hvf-4rqh

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00686 Published 2026-08-20 Fixed in 2.4.0 CWE-89

TI-2026-45014 CVE-2026-63038 · GHSA-8x82-h8qj-qg8w

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00686 Published 2026-08-20 Fixed in 2.4.0 CWE-89

TI-2026-45013 CVE-2026-63037 · GHSA-3wj9-3gpr-q6vj

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00686 Published 2026-08-20 Fixed in 2.4.0 CWE-89

TI-2026-45008 CVE-2026-63016 · GHSA-pr7c-fhx7-xrq6

LOW 31

Uncontrolled Resource Consumption vulnerability in Apache InLong.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00634 Published 2026-08-20 Fixed in 2.4.0 CWE-400

TI-2026-45007 CVE-2026-63015 · GHSA-2wf7-pq8q-vp44

LOW 21

Uncontrolled Resource Consumption vulnerability in Apache InLong.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00559 Published 2026-08-20 Fixed in 2.4.0 CWE-400