Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-27528. PoCs published by exploitintel.
AI-analyzed exploit summary This repository contains functional exploit code demonstrating CVE-2025-27528, a JDBC URL sensitive parameter filter bypass in Apache InLong Manager. The PoC includes multiple scripts to verify the vulnerability, a lab setup with Docker, and detailed technical analysis of the root cause.
Description
Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability allows attackers to bypass the security mechanisms of InLong JDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/11747
Exploits (1)
This repository contains functional exploit code demonstrating CVE-2025-27528, a JDBC URL sensitive parameter filter bypass in Apache InLong Manager. The PoC includes multiple scripts to verify the vulnerability, a lab setup with Docker, and detailed technical analysis of the root cause.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N