{"action":"Upgrade org.apache.inlong:manager-service to 1.8.0 or later.","affected":[{"fixed":"1.8.0","introduced":"1.4.0"}],"component":"org.apache.inlong:manager-service","cve_ids":["CVE-2023-35088"],"ecosystem":"Maven","epss":0.01643,"exploited":false,"fixed_versions":["1.8.0"],"ghsa_id":"GHSA-r5pv-7g89-cxmc","id":"tcs_01M5N9B1QW1GN2JSQH658DBDM9","modified_at":"2025-02-13T19:13:00.933881Z","published_at":"2023-07-25T09:30:18Z","references":["https://osv.dev/vulnerability/GHSA-r5pv-7g89-cxmc","https://nvd.nist.gov/vuln/detail/CVE-2023-35088","https://github.com/apache/inlong/pull/8198","https://github.com/apache/inlong/commit/cab63a8eea6c0f4bf3d30ce245b7e1beee42504d","https://github.com/apache/inlong","https://lists.apache.org/thread/os7b66x4n8dbtrdpb7c6x37bb1vjb0tk","http://seclists.org/fulldisclosure/2023/Jul/43","http://www.openwall.com/lists/oss-security/2023/07/25/4"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-r5pv-7g89-cxmc","url":"https://osv.dev/vulnerability/GHSA-r5pv-7g89-cxmc"}],"summary":"SQL injection in audit endpoint"}