Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Apache StreamPark (incubating) 2.0.0 Clear all filters
TI-2022-22908 CVE-2022-46365 · GHSA-m5h8-2pjw-vg3j

Apache StreamPark (incubating): Logic error causing any account reset

Priority MEDIUM 48

Apache StreamPark 1.0.0 before 2.0.0 When the user successfully logs in, to modify his profile, the username will be passed to the server-layer as a parameter, but not verified whether the user name is the currently logg…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01475 Published 2023-05-01 Fixed in 2.0.0 CWE-20
TI-2022-22606 CVE-2022-45802 · GHSA-6874-289g-f7h7

Apache StreamPark (incubating): Upload any file to any directory

Priority MEDIUM 51

Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01308 Published 2023-05-01 Fixed in 2.0.0 CWE-434