CVE-2023-51784: 
Java vulnerability analysis and mitigation

A Remote Code Execution (RCE) vulnerability, identified as CVE-2023-51784, was discovered in Apache InLong affecting versions 1.5.0 through 1.9.0. The vulnerability stems from an Improper Control of Generation of Code (Code Injection) issue in Apache InLong Manager, which could allow attackers to execute arbitrary code remotely (Security Online, OSS Security).

The vulnerability has been assigned a CVSS v3.1 base score of 9.8 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. It is classified under CWE-94 (Improper Control of Generation of Code) and allows for remote code execution through code injection techniques (NVD).

The vulnerability enables attackers to execute arbitrary code remotely on affected systems, posing a significant risk to the integrity and security of data managed by InLong. Given the CRITICAL severity rating and the complete compromise of confidentiality, integrity, and availability indicated by the CVSS score, the potential impact is severe (Security Online).

Users are strongly advised to upgrade to Apache InLong version 1.10.0, which contains the fix for this vulnerability. Alternatively, users can apply a cherry-pick solution from the provided pull request if immediate upgrading is not possible (OSS Security).