Patchfirst
Patchfirst
ChainApache InLongMaven:org.apache.inlong:manager-pojo

Apache InLong: fix bypasses (2023–2025)

7 CVEs over 5 generations, 25 Jul 2023 to 28 May 2025.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2023-3443425 Jul 2023 First in the chain
  2. CVE-2023-4366816 Oct 2023 related to CVE-2023-34434
  3. CVE-2023-4622719 Oct 2023 next fix after CVE-2023-34434
  4. CVE-2023-517853 Jan 2024 related to CVE-2023-34434related to CVE-2023-43668and 1 more
  5. CVE-2024-265806 Mar 2024 next fix after CVE-2023-46227
  6. CVE-2024-265798 May 2024 related to CVE-2023-51785
  7. CVE-2025-2752228 May 2025 bypassed the fix for CVE-2024-26579related to CVE-2023-51785
Jul 2023OctJan 2024AprJulApr 2025 CVE-2023-34434 → CVE-2023-43668: related (high confidence)CVE-2023-51785 → CVE-2024-26579: related (high confidence)CVE-2024-26579 → CVE-2025-27522: bypassed the fix (high confidence)CVE-2023-34434 → CVE-2023-46227: Next fix in the same package (medium confidence)CVE-2023-34434 → CVE-2023-51785: related (medium confidence)CVE-2023-43668 → CVE-2023-51785: related (medium confidence)CVE-2023-46227 → CVE-2023-51785: Next fix in the same package (medium confidence)CVE-2023-46227 → CVE-2024-26580: Next fix in the same package (medium confidence)CVE-2023-51785 → CVE-2025-27522: related (medium confidence) CVE-2023-34434 25 Jul 2023 CVE-2023-43668 16 Oct 2023 CVE-2023-46227 19 Oct 2023 CVE-2023-51785 3 Jan 2024 CVE-2024-26580 6 Mar 2024 CVE-2024-26579 8 May 2024 CVE-2025-27522 28 May 2025 Jul 2023OctJan 2024AprJulOctJan 2025Apr CVE-2023-34434 → CVE-2023-43668: related (high confidence)CVE-2023-51785 → CVE-2024-26579: related (high confidence)CVE-2024-26579 → CVE-2025-27522: bypassed the fix (high confidence)CVE-2023-34434 → CVE-2023-46227: Next fix in the same package (medium confidence)CVE-2023-34434 → CVE-2023-51785: related (medium confidence)CVE-2023-43668 → CVE-2023-51785: related (medium confidence)CVE-2023-46227 → CVE-2023-51785: Next fix in the same package (medium confidence)CVE-2023-46227 → CVE-2024-26580: Next fix in the same package (medium confidence)CVE-2023-51785 → CVE-2025-27522: related (medium confidence) CVE-2023-34434 25 Jul 2023 CVE-2023-43668 16 Oct 2023 CVE-2023-46227 19 Oct 2023 CVE-2023-51785 3 Jan 2024 CVE-2024-26580 6 Mar 2024 CVE-2024-26579 8 May 2024 CVE-2025-27522 28 May 2025
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2023-34434 25 Jul 2023 Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param · fixed in 1.8.0 First in chain 20.7
CVE-2023-43668 16 Oct 2023 Apache InLong: Jdbc Connection Security Bypass in InLong · fixed in 1.9.0 CVE-2023-34434 · related · High 14.6
CVE-2023-46227 19 Oct 2023 Apache inlong has an Arbitrary File Read Vulnerability · fixed in 1.9.0 CVE-2023-34434 · Next fix in the same package · Medium 19.6
CVE-2023-51785 3 Jan 2024 Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager · fixed in 1.10.0 CVE-2023-34434 · related · Medium 17.9
CVE-2024-26580 6 Mar 2024 Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability · fixed in 1.11.0 CVE-2023-46227 · Next fix in the same package · Medium 20.1
CVE-2024-26579 8 May 2024 Apache Inlong JDBC Vulnerability · fixed in 1.12.0 CVE-2023-51785 · related · High 20.2
CVE-2025-27522 28 May 2025 Apache InLong: JDBC Vulnerability during verification processing · fixed in 2.2.0 CVE-2024-26579 · bypassed the fix · High 16.5
↑ ↓ chooseEnter openEsc close