Apache Streampipes (Apache Software Foundation) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-01-01. Vendor: Apache Software Foundation.

CVEs of Apache Streampipes

• CVE-2025-47411 - CVSS 8.1 (high), 2026-01-01: A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that allows them to…
• CVE-2024-24778 - CVSS 6.5 (medium), 2025-03-03: Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know. This issue affects…
• CVE-2024-31411 - CVSS 8.8 (high), 2024-07-17: Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such a dangerous type might be an executable file that may lead to a…
• CVE-2024-31979 - CVSS 7.5 (high), 2024-07-17: Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously, StreamPipes allowed users…
• CVE-2024-30471 - CVSS 5.3 (medium), 2024-07-17: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration. This allows an attacker to potentially…
• CVE-2024-29868 - CVSS 9.1 (critical), 2024-06-24: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Apache StreamPipes user self-registration and password recovery…
• CVE-2023-31469 - CVSS 8.8 (high), 2023-06-23: A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. This allowed a non-admin user with valid…