CVE-2023-31206: 
Java vulnerability analysis and mitigation

Apache InLong versions 1.4.0 through 1.6.0 contain an Exposure of Resource to Wrong Sphere vulnerability (CVE-2023-31206). The vulnerability allows attackers to change the immutable name and type of nodes within InLong, potentially compromising system integrity (Apache Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (High), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. This indicates that the vulnerability can be exploited remotely with no privileges or user interaction required, and while it doesn't impact confidentiality or availability, it has a high impact on integrity (NVD).

The vulnerability allows attackers to modify immutable properties of InLong nodes, specifically their names and types, which should normally be unchangeable. This capability could lead to system integrity issues and potential disruption of InLong's intended functionality (Apache Advisory).

The vulnerability can be exploited remotely without requiring any authentication or user interaction, making it relatively straightforward to exploit. The attack vector is network-accessible and requires low attack complexity (NVD).

Users are advised to upgrade to Apache InLong version 1.7.0 or later to address this vulnerability. Alternatively, users can apply a cherry-pick fix from the provided pull request if immediate upgrade is not possible (Apache Advisory).