CVE-2023-34189

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could use general users to delete and update the process, which only the admin can operate occurrences.  Users are advised to upgrade to Apache InLong's 1.8.0 or cherry-pick https://github.com/apache/inlong/pull/8109  to solve it.

• CWE-668

• http://www.openwall.com/lists/oss-security/2023/07/25/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/smxqyx43hxjvzv4w71n2n3rfho9p378sMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2023/07/25/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/smxqyx43hxjvzv4w71n2n3rfho9p378sMailing List, Vendor Advisory

Published

Jul 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34183Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-34184Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
• CVE-2023-34185Cross-Site Request Forgery (CSRF) vulnerability in John Brie…6.5
• CVE-2023-34186Missing Authorization vulnerability in Imran Sayed Headless …5.3
• CVE-2023-34187Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-34188The HTTP server in Mongoose before 7.10 accepts requests con…7.5
• CVE-2023-3419The tagDiv Opt-In Builder plugin is vulnerable to Blind SQL …7.2
• CVE-2023-34192Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 al…9
• CVE-2023-34193File Upload vulnerability in Zimbra ZCS 8.8.15 allows an aut…8.8
• CVE-2023-34194StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp …7.5
• CVE-2023-34195An issue was discovered in SystemFirmwareManagementRuntimeDx…7.8
• CVE-2023-34196In the Keyfactor EJBCA before 8.0.0, the RA web certificate …8.2