{"action":"Upgrade org.apache.inlong:inlong-manager to 1.6.0 or later.","affected":[{"fixed":"1.6.0","introduced":"1.1.0"}],"component":"org.apache.inlong:inlong-manager","cve_ids":["CVE-2023-27296"],"ecosystem":"Maven","epss":0.01475,"exploited":false,"fixed_versions":["1.6.0"],"ghsa_id":"GHSA-gpqq-59rp-3c3w","id":"tcs_01M5N8YMK3MX51F05DAG3VB2W3","modified_at":"2023-11-08T04:12:04.051854Z","published_at":"2023-03-27T15:30:16Z","references":["https://osv.dev/vulnerability/GHSA-gpqq-59rp-3c3w","https://nvd.nist.gov/vuln/detail/CVE-2023-27296","https://github.com/apache/inlong/pull/7422","https://github.com/apache/inlong","https://lists.apache.org/thread/xbvtjw9bwzgbo9fp1by8o3p49nf59xzt","https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-gpqq-59rp-3c3w","url":"https://osv.dev/vulnerability/GHSA-gpqq-59rp-3c3w"}],"summary":"Apache InLong vulnerable to JDBC Deserialization of Untrusted Data"}