Apache Seatunnel Web (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2024-08-21. Vendor: Apache Software Foundation.

CVEs of Apache Seatunnel Web

• CVE-2023-49198 - CVSS 7.5 (high), 2024-08-21: Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL…
• CVE-2023-48396 - CVSS 9.1 (critical), 2024-07-30: Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user.…