title: Apache InLong: Jdbc Connection Security Bypass in InLong
description: Authorization Bypass Through User-Controlled Key vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0,
some sensitive params  checks will be bypassed, like "autoDeserizalize","allowLoadLocalInfile"....
.
Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it.
[1]  https://github.com/apache/inlong/pull/8604
problem types: CWE-639 Authorization Bypass Through User-Controlled Key
affected:
{
defaultStatus: unaffected
product: Apache InLong
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 1.8.0, status: affected, version: 1.4.0, versionType: semver
}
metrics:
other: [
content: {'text': 'important'}
type: Textual description of severity
]