CVE-2023-43667: Apache Inlong

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can create misleading or false log records, making it harder to audit and trace malicious activities. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/8628

Affected products

• Apache Inlong: from 1.4.0, up to and including 1.8.0

Published 2023-10-16. Last modified 2026-06-17.