Apache Streampark Incubating (Apache Software Foundation) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-17. Vendor: Apache Software Foundation.
CVEs of Apache Streampark Incubating
- CVE-2023-52291 - CVSS 8.8 (high), 2024-07-17: In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert…
- CVE-2024-29737 - CVSS 8.8 (high), 2024-07-17: In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert…
- CVE-2023-52290 - CVSS 8.1 (high), 2024-07-16: In streampark-console the list pages(e.g: application pages), users can sort page by field. This sort field is sent from the front-end to the back-end, and…
- CVE-2023-49898 - CVSS 7.2 (high), 2023-12-15: In streampark, there is a project module that integrates Maven's compilation capability. However, there is no check on the compilation parameters of Maven.…
- CVE-2023-30867 - CVSS 4.9 (medium), 2023-12-15: In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role…
- CVE-2022-46365 - CVSS 9.1 (critical), 2023-05-01: Apache StreamPark 1.0.0 before 2.0.0 When the user successfully logs in, to modify his profile, the username will be passed to the server-layer as a…
- CVE-2022-45802 - CVSS 9.8 (critical), 2023-05-01: Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some…
- CVE-2022-45801 - CVSS 5.4 (medium), 2023-05-01: Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP…
