IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-08-20 16:17

MODIFIED

2026-08-20 16:17

EPSS (Prob. Exploit)

0.64%

Top 49.7%

DATA SOURCES:

NVD 🔗 2026-08-20 CWE MITRE 🔗 2026-09-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

Files or Directories Accessible to External Parties vulnerability in Apache InLong. StreamSource performs no authorization check, any authenticated user can logically delete ALL stream sources. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/12145 .

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-552

> CWE DETAILED DESCRIPTIONS

CWE-552: Files or Directories Accessible to External Parties - The product makes files or directories accessible to unauthorized actors, even though they should not be.

> HISTORIQUE DES MODIFICATIONS

Première apparition

20/08/2026 16:17

Source: NVD

📊 ENRICHISSEMENT 01/09/2026 06:02

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-552: Files or Directories Accessible to External Parties - The product makes files or directories accessible to unauthorized actors, even though they should not be.

Total des modifications: 1 Dernière mise à jour: 1 month ago

> REFERENCES

https://lists.apache.org/thread/sbqrk88cjv3r9rnqfqgn31ox4711offy