Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-40955 Details

Description

In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL database, could cause this data to be deserialized by Apache InLong, potentially leading to Remote Code Execution on the Apache InLong server. Users are advised to upgrade to Apache InLong 1.3.0 or newer.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: CISA-ADPCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://lists.apache.org/thread/r1r34y7bchrpmp9jhfdoohzdmk7pj1q1 CVEIssue TrackingMailing ListPatchVendor Advisory
http://www.openwall.com/lists/oss-security/2022/09/22/5 CVEMailing ListThird Party Advisory
https://lists.apache.org/thread/r1r34y7bchrpmp9jhfdoohzdmk7pj1q1 [email protected]Issue TrackingMailing ListPatchVendor Advisory
http://www.openwall.com/lists/oss-security/2022/09/22/5 [email protected]Mailing ListThird Party Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-502Deserialization of Untrusted Data[email protected]
CWE-502Deserialization of Untrusted Data[email protected]

Affected Products

ProductVersions
apache inlong
< 1.3.0

CPE

  • cpe:2.3:a:apache:inlong:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

10 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-40955
NVD Published Date:
Sep 20, 2022
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2022-40955 Details - Not Deferred