CVE-2023-30465

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the "orderType" parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the   user with ID 1 from the "user" table, one character at a time.  Users are advised to upgrade to Apache InLong's 1.6.0 or cherry-pick [1] to solve it. https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html [1] https://github.com/apache/inlong/issues/7529 https://github.com/apache/inlong/issues/7529

• CWE-89

• http://www.openwall.com/lists/oss-security/2023/04/11/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/mrh4nr3jrlbj6nxkn4q8hddbfh1pnok0Mailing List
• http://www.openwall.com/lists/oss-security/2023/04/11/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/mrh4nr3jrlbj6nxkn4q8hddbfh1pnok0Mailing List

Published

Apr 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30456An issue was discovered in arch/x86/kvm/vmx/nested.c in the …6.5
• CVE-2023-30458A username enumeration issue was discovered in Medicine Trac…5.3
• CVE-2023-30459SmartPTT SCADA 1.1.0.0 allows remote code execution (when th…7.2
• CVE-2023-3046Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-30463Altran picoTCP through 1.7.0 allows memory corruption (and s…7.5
• CVE-2023-30464CoreDNS through 1.10.1 enables attackers to achieve DNS cach…7.5
• CVE-2023-30466This vulnerability exists in Milesight 4K/H.265 Series NVR m…9.8
• CVE-2023-30467This vulnerability exists in Milesight 4K/H.265 Series NVR m…9.8
• CVE-2023-30469Cross-site Scripting vulnerability in Hitachi Ops Center Ana…6.1
• CVE-2023-3047Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-30470A use-after-free related to unsound inference in the bytecod…9.8
• CVE-2023-30471Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1